Examkin

Soru

Zorluk: ZorSecurity, Governance, and Manageability

A retail company is migrating its e-commerce application to Azure. The migration plan includes deploying Azure Virtual Machines (IaaS) for the web servers and Azure SQL Database (PaaS) for data storage. To implement security, governance, and manageability, the cloud administrator proposes the following design:

1. Nest the database resource group inside the web server resource group to maintain a parent-child administrative hierarchy.
2. Deploy the database resources in the East US region, even though the containing resource group is located in the West US region.
3. Delegate all operating system security patching for both the Virtual Machines and the SQL Database to Microsoft under the shared responsibility model.

Which parts of the administrator's proposed design are valid?

  1. A
    The proposals to nest resource groups and to deploy the database in a different region are both valid, while the customer must manage patching for both services.
  2. Only the proposal to deploy the database resources in a region different from the resource group's region is valid.Cevap
  3. C
    Only the proposal to delegate all operating system patching to Microsoft is valid, as resources must reside in the same region as their resource group.
  4. D
    All three proposals are valid under Azure's governance guidelines and the shared responsibility model.

Cevap

Only the proposal to deploy the database resources in a region different from the resource group's region is valid.
The correct answer is the option stating that only the proposal to deploy the database resources in a region different from the resource group's region is valid. Azure Resource Manager permits resources to be deployed in any region regardless of the resource group's region (which is solely used to store deployment metadata). Nesting resource groups is not supported in Azure, and guest operating system patching for Azure Virtual Machines (an IaaS model) is the customer's responsibility, not Microsoft's.

Adım Adım Çözüm

1
Evaluate the first proposal regarding nesting resource groups.
Resource groups in Azure cannot be nested.
Azure Resource Manager uses a flat structure for resource groups within a subscription; hierarchy is managed via management groups, not by nesting resource groups.
2
Evaluate the second proposal regarding resource group location and resource location.
Resources can reside in a different region than their containing resource group.
A resource group's location specifies where its deployment metadata is stored, not where the actual resources must be provisioned. Deployed resources can reside in any supported Azure region.
3
Evaluate the third proposal regarding operating system patching under the shared responsibility model.
Operating system patching is a customer responsibility for Virtual Machines (IaaS) but a provider responsibility for Azure SQL Database (PaaS).
Under Infrastructure as a Service (IaaS), the customer retains full control and responsibility over the OS, including security patching. Under Platform as a Service (PaaS), Azure manages the underlying infrastructure, operating system, and patching.
4
Combine the evaluations to select the correct governance and responsibility statement.
Only proposal 2 is valid; proposals 1 and 3 are invalid.
Since nesting is unsupported and IaaS OS patching is a customer responsibility, only the statement confirming that resources can reside in different regions than their resource groups is correct.

Anahtar Kavram

Azure resource group governance rules, metadata location independence, and the shared responsibility model differences between IaaS and PaaS.
Bu soruyu puanla

Konular

Security, Governance, and Manageability

Bu konudan daha fazla soru