Examkin

Soru

Zorluk: Çok zorInfrastructure as a Service (IaaS)

An organization migrates its on-premises web application to Azure Virtual Machines (IaaS). To secure the environment, they implement Azure Disk Encryption using customer-managed keys stored in Azure Key Vault and configure User-Defined Routes (UDRs) to steer traffic through a network virtual appliance. Is the statement that Microsoft is responsible for managing the encryption keys and configuring the routing rules because they are implemented using Azure platform services true or false?

Cevap: Cevap

Cevap

False
The correct answer is false because under the shared responsibility model, the customer is responsible for configuring and managing customer-controlled settings such as User-Defined Routes and customer-managed keys in Azure Key Vault.

Adım Adım Çözüm

1
Analyze the service models and configurations described in the scenario.
The scenario involves Azure Virtual Machines (IaaS), Azure Disk Encryption using customer-managed keys (CMK) stored in Azure Key Vault, and User-Defined Routes (UDRs).
Identifying the services and configuration options is necessary to map the shared responsibility boundaries.
2
Determine ownership of User-Defined Routes (UDRs).
The customer is responsible for configuring and maintaining UDRs and routing tables to direct traffic.
Although Azure provides the virtual network infrastructure, the logical configuration of routing rules is a customer responsibility in IaaS and hybrid networking.
3
Determine ownership of Customer-Managed Keys (CMK) in Azure Key Vault.
The customer is responsible for key management tasks including creation, rotation, and access policies.
By choosing 'customer-managed keys' instead of 'platform-managed keys', the customer explicitly assumes ownership of key management.
4
Evaluate the statement based on the identified responsibilities.
The statement asserts Microsoft is responsible for these configurations, which contradicts the shared responsibility model.
Since both routing configuration and key management are customer responsibilities in this setup, the statement is false.

Anahtar Kavram

Shared responsibility model in Azure IaaS and key/route configurations
Tahmini Süre:1m 30s
Bu soruyu puanla

Konular

Infrastructure as a Service (IaaS)

Bu konudan daha fazla soru