Soru

Zorluk: ZorInfrastructure as a Service (IaaS)

An organization is planning to migrate its legacy enterprise resource planning (ERP) application to Azure. The application has three main requirements:

1. Custom kernel extensions on a specific version of Linux.
2. Full control over the database engine installation to support a legacy version of Oracle Database.
3. Integration with on-premises Active Directory using a site-to-site VPN.

To meet these requirements, the organization deploys Azure Virtual Machines and an Azure VPN Gateway.

Which two of the following tasks are the responsibility of the organization in this setup? (Select two.)

  1. Configuring the guest operating system firewall and patching the Oracle database engine.Cevap
  2. Configuring the IP addressing and routing within the Azure Virtual Network (VNet) where the virtual machines are deployed.Cevap
  3. C
    Applying security updates and operating system patches to the virtual private network gateway appliance.
  4. D
    Maintaining physical security, hardware lifecycle, and physical network cabling of the host servers in the Azure datacenter.

Cevap

Configuring the guest operating system firewall and patching the Oracle database engine, and configuring the IP addressing and routing within the Azure Virtual Network (VNet) where the virtual machines are deployed.
Under the Infrastructure as a Service (IaaS) model, the customer is responsible for everything from the guest operating system upward, which includes installing updates, managing databases, and setting up guest-level firewalls. Additionally, customers are responsible for specifying and managing configuration details within their Virtual Networks (VNets), such as routing and IP addresses.

Adım Adım Çözüm

1
Identify the service models of the deployed Azure resources.
Azure Virtual Machines operate under the Infrastructure as a Service (IaaS) model, while the Azure VPN Gateway is a managed Platform as a Service (PaaS) offering.
Correctly identifying the service models is essential to applying the shared responsibility boundaries.
2
Determine the customer's responsibilities for the IaaS Virtual Machines.
The customer is responsible for managing, configuring, and patching the guest operating system, applications, databases, and middleware.
Under IaaS, Microsoft only manages the physical hosts, hypervisor, and physical network infrastructure.
3
Determine the customer's responsibilities for the managed PaaS and networking components.
The customer is responsible for setting up VNet configuration details like IP addressing and routing, but does not manage the operating system or apply software updates to managed appliances like the VPN Gateway.
PaaS offloads OS administration and appliance patching responsibilities to Microsoft, reducing operational overhead.

Anahtar Kavram

IaaS Shared Responsibility Model
Tahmini Süre:2m 0s
Bu soruyu puanla