Examkin

Soru

Zorluk: OrtaShared Responsibility Model

A retail company is migrating its customer-facing application from an on-premises datacenter to Azure. The migration is divided into two phases:

* Phase 1: The database is migrated to an Azure SQL Database instance (PaaS).
* Phase 2: The front-end web server is migrated to an Azure Virtual Machine (IaaS).

Which of the following statements correctly describe the customer's operational responsibilities after completing both phases? (Select two.)

  1. The customer is responsible for managing database user permissions and classifying data within the Azure SQL Database.Cevap
  2. The customer is responsible for configuring network controls, such as Network Security Groups (NSGs), for the Azure Virtual Machine.Cevap
  3. C
    The customer is responsible for applying operating system patches to both the Azure Virtual Machine and the Azure SQL Database.
  4. D
    Microsoft is responsible for configuring the database engine and patching the operating system of the Azure Virtual Machine.

Cevap

The correct statements are that the customer is responsible for managing database user permissions and classifying data within the Azure SQL Database, and that the customer is responsible for configuring network controls, such as Network Security Groups, for the Azure Virtual Machine.
In the Azure Shared Responsibility Model, the customer always retains full responsibility for information, data, accounts, and access control, regardless of the service model. Therefore, managing database user permissions and classifying data within the Azure SQL Database remains a customer responsibility. Additionally, in an Infrastructure as a Service (IaaS) model, the customer is responsible for configuring host-level network controls, such as Network Security Groups, to secure their Virtual Machines.

Adım Adım Çözüm

1
Analyze Phase 1 (Azure SQL Database - PaaS)
In a PaaS model, Microsoft manages the physical infrastructure, virtualization, and the operating system (including patching), while the customer retains responsibility for database accounts/logins, data classification, and access permissions.
Applying the Shared Responsibility Model guidelines for Platform as a Service (PaaS) to determine what falls under the customer's control.
2
Analyze Phase 2 (Azure Virtual Machine - IaaS)
In an IaaS model, Microsoft manages the physical hosts, network, and datacenter security, while the customer is responsible for configuring, patching, and maintaining the operating system, middleware, applications, and network controls (such as NSGs) at the virtual machine level.
Applying the Shared Responsibility Model guidelines for Infrastructure as a Service (IaaS) to determine what falls under the customer's control.
3
Evaluate the choices and select the correct statements
The statement about managing DB user permissions (PaaS) and configuring VM network controls (IaaS) are correct. The statements about customer patching the PaaS OS or Microsoft managing the IaaS OS/DB engine are incorrect.
Correlating the findings from steps 1 and 2 to select the two correct options.

Anahtar Kavram

Under the Shared Responsibility Model, the customer is always responsible for data, accounts, and access management. For IaaS, the customer manages the operating system, middleware, and network controls. For PaaS, Microsoft manages the operating system and physical layer, while the customer manages database users and data.
Bu soruyu puanla

Konular

Shared Responsibility Model

Bu konudan daha fazla soru