Soru

Zorluk: OrtaSoftware as a Service (SaaS)

A company plans to migrate its on-premises email and collaboration suite to Microsoft 365, which is a Software as a Service (SaaS) offering. Under the Microsoft shared responsibility model, which of the following duties remains the responsibility of the customer?

  1. A
    Paying upfront Capital Expenditure (CapEx) to purchase the hardware capacity for the application
  2. B
    Applying security patches and updates to the server operating system
  3. Configuring user access permissions and protecting organization dataCevap
  4. D
    Upgrading the application's underlying database middleware and framework code

Cevap

Configuring user access permissions and protecting organization data
The correct answer is configuring user access permissions and protecting organization data. Under the shared responsibility model, regardless of the cloud deployment type (IaaS, PaaS, or SaaS), the customer always retains ownership and responsibility for their data, endpoints, accounts, and access management.

Adım Adım Çözüm

1
Identify the cloud service model referenced in the scenario.
The scenario specifies Microsoft 365, which is a Software as a Service (SaaS) offering.
Determining the cloud model allows the application of the correct shared responsibility boundaries.
2
Analyze the customer responsibility boundaries for the identified SaaS model.
In SaaS, the cloud provider manages the physical infrastructure, operating systems, network controls, and application software. The customer remains responsible for data, endpoints (devices), and identity access management.
This isolates the tasks that the customer must perform from those managed by Microsoft.
3
Evaluate the choices to find the duty that belongs to the customer.
Configuring access permissions and securing organizational data is a customer duty, whereas patching operating systems, managing middleware, and upfront hardware CapEx are managed by the provider or apply to different cloud models.
This confirms that managing user access and protecting data is the correct customer responsibility.

Anahtar Kavram

Shared Responsibility Model in Software as a Service (SaaS)
Tahmini Süre:1m 0s
Bu soruyu puanla