Question

Difficulty: MediumShared Responsibility Model

A manufacturing company hosts a custom inventory-tracking application on Azure App Service (PaaS). The company decides to migrate this workload to Microsoft SharePoint Online (SaaS) to streamline operations. Which responsibility shifts from a shared responsibility between the company and Microsoft to the sole responsibility of Microsoft?

  1. A
    The classification and security of the stored inventory data
  2. B
    The installation of security patches on the hosting operating system
  3. The maintenance and updating of the application software itselfAnswer
  4. D
    The management and configuration of the guest operating system

Answer

The maintenance and updating of the application software itself
In a Platform as a Service (PaaS) model, application management is a shared responsibility because the customer writes, deploys, and configures the application code, while Microsoft manages the underlying application hosting environment. When moving to a Software as a Service (SaaS) model, Microsoft takes over full responsibility for the application software, including its updates, maintenance, and codebase.

Step-by-Step Solution

1
Analyze the starting environment (PaaS - Azure App Service)
In PaaS, responsibility for the application layer is shared: the customer builds, configures, and runs their code, while Microsoft manages the underlying execution environment.
To determine what shifts, we must first establish the baseline responsibilities in the starting model.
2
Analyze the target environment (SaaS - SharePoint Online)
In SaaS, the application software is fully provided, maintained, updated, and managed by the cloud provider (Microsoft). The customer only configures accounts, access, and settings.
Understanding the destination model reveals which responsibilities are handed over to the cloud provider.
3
Identify the difference between PaaS and SaaS responsibilities
The duty of writing, deploying, updating, and maintaining the application software shifts from the customer (PaaS) to Microsoft (SaaS). Data classification and identity management remain customer responsibilities in both models.
Comparing the two models pinpoints the exact boundary transition.

Key Concept

Shared Responsibility Model PaaS to SaaS transition
Estimated Time:1m 0s
Rate this question