Examkin

Soru

Zorluk: ZorShared Responsibility Model

An educational technology company hosts its online learning portal on Azure. Currently, the backend APIs run on Windows Server-based Azure Virtual Machines (IaaS), and user file storage is managed by a custom document management application installed on a separate Virtual Machine. To reduce administrative overhead, the IT team plans to migrate the API backend to Azure App Service (PaaS) and the file storage to a Software as a Service (SaaS) cloud storage solution.

Which two responsibilities shift entirely from the customer to Microsoft as a result of this migration? (Select two.)

  1. Updating and patching the operating system that runs the API backendCevap
  2. Upgrading and maintaining the software application used for file storageCevap
  3. C
    Ensuring physical security and power supply for the physical servers hosting the APIs
  4. D
    Classifying and governing the data stored in the file storage solution

Cevap

Updating and patching the operating system that runs the API backend, and upgrading and maintaining the software application used for file storage
The correct options are the ones stating that the customer shifts responsibility for updating and patching the operating system running the API backend, and upgrading and maintaining the software application used for file storage. In the IaaS model, the customer is responsible for both the guest operating system and any installed application software. Transitioning to PaaS (Azure App Service) shifts operating system management to Microsoft, while transitioning to SaaS shifts application software maintenance to Microsoft.

Adım Adım Çözüm

1
Analyze the initial deployment state of the company's workloads.
The API backend is deployed on Azure VMs (IaaS), and the file storage application is also deployed on a VM (IaaS). Under IaaS, the customer is responsible for operating system configuration, OS patching, middleware, and application software management.
To determine what responsibilities shift, we first need to establish the baseline responsibilities in the starting IaaS model.
2
Analyze the target deployment state after migration.
The API backend is migrated to Azure App Service (PaaS), where Microsoft manages the operating system, middleware, and runtime. The file storage is migrated to a SaaS solution, where Microsoft manages the application software, operating system, and hardware.
This establishes the target responsibilities under PaaS and SaaS models.
3
Identify the specific responsibilities that move from the customer to Microsoft.
Operating system updates for the API backend shift from the customer (IaaS) to Microsoft (PaaS). Maintenance and upgrades of the file storage application software shift from the customer (IaaS) to Microsoft (SaaS). Physical security of servers and data governance do not shift because physical security was already Microsoft's responsibility in IaaS, and data classification remains the customer's responsibility in all models.
This differentiates shifting responsibilities from those that remain constant before and after the migration.

Anahtar Kavram

The Shared Responsibility Model defines how security and operational responsibilities are divided between the cloud customer and the cloud provider (Microsoft) based on the service type (IaaS, PaaS, or SaaS). As you move from IaaS to PaaS and SaaS, more responsibilities shift to Microsoft, but the customer always retains responsibility for data, endpoints, accounts, and access management.
Bu soruyu puanla

Konular

Shared Responsibility Model

Bu konudan daha fazla soru