Examkin

Soru

Zorluk: ZorShared Responsibility Model

A financial organization is planning to migrate its on-premises systems to Microsoft Azure. They will deploy legacy line-of-business applications on Azure Virtual Machines (IaaS), host their transactional databases on Azure SQL Database (PaaS), and migrate their collaboration tools to Microsoft 365 (SaaS). To maintain regulatory compliance, the IT security team must classify their operational tasks according to the Azure Shared Responsibility Model.

Match each operational task on the left with the correct responsibility classification under the Azure Shared Responsibility Model on the right.

  • Patching the guest operating system of a virtual machine hosting a legacy ERP application.Solely the customer's responsibility in Infrastructure as a Service (IaaS), but managed by Microsoft in Platform as a Service (PaaS) and Software as a Service (SaaS).
  • Securing the physical server racks and hardware in the Azure datacenter.Solely Microsoft's responsibility across all cloud deployment models (IaaS, PaaS, and SaaS).
  • Configuring network controls, such as firewall rules, for Azure SQL Database.Shared between Microsoft and the customer in a Platform as a Service (PaaS) deployment, but solely the customer's responsibility in Infrastructure as a Service (IaaS).
  • Classifying corporate data assets and managing user access accounts.Solely the customer's responsibility across all cloud deployment models (IaaS, PaaS, and SaaS).

Cevap

The correct matches pair: 'Patching the guest operating system' with 'Solely the customer's responsibility in IaaS, but managed by Microsoft in PaaS and SaaS'; 'Securing the physical server racks' with 'Solely Microsoft's responsibility across all cloud models'; 'Configuring network controls' with 'Shared in PaaS, but solely the customer's in IaaS'; and 'Classifying corporate data assets' with 'Solely the customer's responsibility across all cloud models'.
The correct matching aligns tasks to their appropriate owners based on cloud service models: guest OS patching is customer-managed in IaaS only; physical security is always Microsoft's job; network controls are shared in PaaS but customer-only in IaaS; data and identity management are always the customer's responsibility.

Adım Adım Çözüm

1
Identify the service model for each task.
Operating system patching applies to IaaS Virtual Machines; physical security applies to the datacenter; firewall configurations apply to PaaS SQL Database; data and accounts apply to the general cloud environment including SaaS.
This separates the tasks into their corresponding service categories (IaaS, PaaS, SaaS, or infrastructure-wide).
2
Apply the Shared Responsibility Model rules.
Note that physical security is always Microsoft's responsibility, whereas data and accounts are always the customer's responsibility.
This resolves the static boundaries that do not shift between service models.
3
Analyze transition boundaries for operating systems and network controls.
OS patching shifts from customer (IaaS) to Microsoft (PaaS/SaaS). Network controls are shared in PaaS, customer-controlled in IaaS, and provider-managed in SaaS.
This resolves the dynamic boundaries that shift depending on the level of cloud service management.

Anahtar Kavram

Shared Responsibility Model
Bu soruyu puanla

Konular

Shared Responsibility Model

Bu konudan daha fazla soru