Examkin

Question

Difficulty: Very hardInfrastructure as a Service (IaaS)

An organization migrates its on-premises web application to Azure Virtual Machines (IaaS). To secure the environment, they implement Azure Disk Encryption using customer-managed keys stored in Azure Key Vault and configure User-Defined Routes (UDRs) to steer traffic through a network virtual appliance. Is the statement that Microsoft is responsible for managing the encryption keys and configuring the routing rules because they are implemented using Azure platform services true or false?

Answer: Answer

Answer

False
The correct answer is false because under the shared responsibility model, the customer is responsible for configuring and managing customer-controlled settings such as User-Defined Routes and customer-managed keys in Azure Key Vault.

Step-by-Step Solution

1
Analyze the service models and configurations described in the scenario.
The scenario involves Azure Virtual Machines (IaaS), Azure Disk Encryption using customer-managed keys (CMK) stored in Azure Key Vault, and User-Defined Routes (UDRs).
Identifying the services and configuration options is necessary to map the shared responsibility boundaries.
2
Determine ownership of User-Defined Routes (UDRs).
The customer is responsible for configuring and maintaining UDRs and routing tables to direct traffic.
Although Azure provides the virtual network infrastructure, the logical configuration of routing rules is a customer responsibility in IaaS and hybrid networking.
3
Determine ownership of Customer-Managed Keys (CMK) in Azure Key Vault.
The customer is responsible for key management tasks including creation, rotation, and access policies.
By choosing 'customer-managed keys' instead of 'platform-managed keys', the customer explicitly assumes ownership of key management.
4
Evaluate the statement based on the identified responsibilities.
The statement asserts Microsoft is responsible for these configurations, which contradicts the shared responsibility model.
Since both routing configuration and key management are customer responsibilities in this setup, the statement is false.

Key Concept

Shared responsibility model in Azure IaaS and key/route configurations
Estimated Time:1m 30s
Rate this question

Topics

Infrastructure as a Service (IaaS)

More questions from this topic