Hotspot Question Your company contracts with a Platform-as-a-Service (PaaS) host to support web and mobile application development. You need to identify management responsibilities. Who is…

Question

Exhibit

Answer Area

• Application data:
  Company IT personnelMicrosoft
• Applications:
  Company IT personnelMicrosoft
• Network infrastructure:
  Company IT personnelMicrosoft
• Storage:
  Company IT personnelMicrosoft
• Operating systems:
  Company IT personnelMicrosoft

Explanation

In a Platform-as-a-Service (PaaS) model, the cloud provider manages the underlying infrastructure and operating systems, while the customer is responsible for managing their applications and data.

Approach. According to the cloud shared responsibility model for PaaS:

• Application data: The customer (Company IT personnel) is always responsible for the security, governance, and management of their own data, regardless of the cloud service type.
• Applications: In PaaS, the platform is provided so the customer can build, deploy, and manage their own applications (Company IT personnel).
• Network infrastructure: The underlying physical and core virtual network is managed by the cloud provider (Microsoft).
• Storage: The physical storage hardware and infrastructure are managed by the cloud provider (Microsoft).
• Operating systems: This is the key differentiator for PaaS. The cloud provider (Microsoft) abstracts the OS layer, handling patching, updates, and maintenance, allowing the customer to focus solely on their apps.

Common mistakes.

• common_mistake. A common mistake is confusing PaaS with Infrastructure-as-a-Service (IaaS). If a user selects 'Company IT personnel' for Operating systems, they are describing an IaaS model where the customer provisions virtual machines and must manage the guest OS. Conversely, selecting 'Microsoft' for Applications would imply a Software-as-a-Service (SaaS) model where the provider delivers a fully functional application.

Concept tested. Cloud Shared Responsibility Model (specifically Platform-as-a-Service / PaaS)

Reference. https://learn.microsoft.com/en-us/azure/security/fundamentals/shared-responsibility

No community discussion yet for this question.