Examkin

Soru

Zorluk: Çok zorShared Responsibility Model

An organization is planning to migrate its legacy intranet document management system, which is currently hosted on several Azure Virtual Machines (IaaS) with an on-VM SQL Server database. The security architecture team is comparing two migration paths:

- Path X (PaaS): Replatform the web tier to Azure App Service and migrate the database to Azure SQL Database.
- Path Y (SaaS): Replace the entire system with Microsoft 365 SharePoint Online.

Which of the following statements correctly describes the shift in responsibility for network controls and operating system patching when moving from the current IaaS state to either Path X or Path Y?

  1. A
    For Path X, the operating system patching remains the sole responsibility of the customer, while network controls transfer entirely to Microsoft. For Path Y, network controls become a shared responsibility.
  2. B
    For both Path X and Path Y, network controls remain the sole responsibility of the customer, while operating system patching is shared between Microsoft and the customer.
  3. For Path X, the responsibility for operating system patching transfers entirely to Microsoft, while network controls become a shared responsibility. For Path Y, the responsibility for both operating system patching and network controls transfers entirely to Microsoft.Cevap
  4. D
    For both Path X and Path Y, Microsoft assumes sole responsibility for database engine configuration and network controls, while the customer retains responsibility for operating system patching under Path X.

Cevap

For Path X (PaaS), the responsibility for operating system patching transfers entirely to Microsoft, while network controls become a shared responsibility. For Path Y (SaaS), the responsibility for both operating system patching and network controls transfers entirely to Microsoft.
Under the Azure Shared Responsibility Model, transitioning from Infrastructure as a Service (IaaS) to Platform as a Service (PaaS) or Software as a Service (SaaS) shifts various management tasks to Microsoft. In PaaS (Path X), Microsoft manages the physical infrastructure, virtualization, and the operating system (including OS patching), while network controls (like configuring virtual network integration or IP restrictions) are a shared responsibility between the customer and Microsoft. In SaaS (Path Y), Microsoft manages the entire stack except for information/data, devices, and accounts/identities, meaning both operating system patching and network controls are fully managed by Microsoft.

Adım Adım Çözüm

1
Analyze the starting state (IaaS on Azure Virtual Machines).
In IaaS, the customer is fully responsible for operating system patching and configuring network controls (e.g., Network Security Groups, route tables).
Establishing the baseline responsibilities is necessary to evaluate the shift.
2
Evaluate the shift for Path X (PaaS using Azure App Service and Azure SQL Database).
In PaaS, the cloud provider (Microsoft) handles the physical infrastructure and the operating system (including OS patching). Network controls become a shared responsibility (e.g., the customer configures App Service networking integrations, firewall rules, and private endpoints, while Microsoft secures the underlying network infrastructure).
Determines the specific responsibility profile for the PaaS path.
3
Evaluate the shift for Path Y (SaaS using SharePoint Online).
In SaaS, Microsoft manages almost the entire stack, including physical hosts, network controls, operating systems, and applications. The customer only retains responsibility for information/data, devices, and accounts/identities.
Determines the specific responsibility profile for the SaaS path.
4
Compare the evaluation results with the options to identify the correct statement.
The statement describing Path X as having Microsoft-managed OS patching with shared network controls, and Path Y as having both OS patching and network controls fully managed by Microsoft, is correct.
Matches the logical analysis of the responsibility transitions to the correct option.

Anahtar Kavram

Shared Responsibility Model Transitions (IaaS to PaaS and SaaS)
Bu soruyu puanla

Konular

Shared Responsibility Model

Bu konudan daha fazla soru