Examkin

Soru

Zorluk: ZorShared Responsibility Model

A software development company hosts its testing environment on Azure Virtual Machines. The team is migrating their databases from these virtual machines to Azure SQL Database to leverage platform-provided high availability.

Following this migration from Infrastructure as a Service (IaaS) to Platform as a Service (PaaS), how does the shared responsibility model change regarding operating system patching and network access controls to the database?

  1. Microsoft assumes responsibility for operating system patching, while the customer remains responsible for configuring database-level network access controls.Cevap
  2. B
    The customer remains responsible for operating system patching, while Microsoft assumes responsibility for managing database-level network access controls.
  3. C
    Microsoft assumes responsibility for both operating system patching and all network access controls, removing the need for customer network configuration.
  4. D
    The customer remains responsible for both operating system patching and database-level network access controls, as Azure SQL Database does not alter the responsibility boundary.

Cevap

Microsoft assumes responsibility for operating system patching, while the customer remains responsible for configuring database-level network access controls.
When migrating a database from an Azure Virtual Machine (IaaS) to Azure SQL Database (PaaS), the responsibility for managing the physical infrastructure, hypervisor, and operating system updates transfers entirely to Microsoft. However, the customer retains responsibility for ensuring that only authorized traffic can access the database, meaning they must still configure database firewalls, IP restriction rules, and network integration features.

Adım Adım Çözüm

1
Identify the service models involved in the transition.
The database workload is moving from Azure Virtual Machines (which is an Infrastructure as a Service, or IaaS, model) to Azure SQL Database (which is a Platform as a Service, or PaaS, model).
Determining the service models establishes which responsibility boundaries apply before and after the migration.
2
Determine the owner of operating system patching in the PaaS model.
In PaaS, physical hardware, virtualization layers, and the underlying operating system (including OS patching and database engine maintenance) are managed completely by the cloud provider (Microsoft).
One of the key benefits of moving from IaaS to PaaS is offloading OS maintenance tasks to Microsoft.
3
Determine the owner of network access controls in the PaaS model.
The customer remains responsible for configuring access policies, database-level firewall rules, virtual network rules, and private endpoints.
Under the shared responsibility model, the customer is always responsible for configuring data access permissions, regardless of whether the service is IaaS, PaaS, or SaaS.

Anahtar Kavram

The transition of operational responsibilities (specifically OS management vs network security) from IaaS to PaaS under the Azure Shared Responsibility Model.
Tahmini Süre:2m 0s
Bu soruyu puanla

Konular

Shared Responsibility Model

Bu konudan daha fazla soru