Microsoft Certified Azure Fundamentals · Free Practice Question Medium
Question 8
A healthcare provider migrates patient records to Azure, expecting the cloud provider to maintain physical server security and virtualization, while their IT team encrypts data and configures access controls. Which responsibilities align with the shared responsibility model in this context? (Select all that apply.)
-
A
The customer defines access policies for application users
-
B
The provider secures the physical infrastructure and network
-
C
The customer manages physical hardware maintenance
-
D
The provider implements data encryption for all stored records
Reveal correct answers
Correct answers: A, B
Explanation
In the context of the healthcare provider migrating patient records to Azure, the shared responsibility model dictates that both the cloud provider and the customer have specific responsibilities for securing the environment. The responsibilities are generally divided as follows:
Cloud Provider: Manages the physical infrastructure, such as the physical security of the servers, network, and data centers, as well as the underlying virtualization layers (hypervisors, for instance).
Customer: Manages the data (encryption, access controls) and applications, ensuring that the data stored in the cloud is secured and only accessible by authorized users.
Let’s review the options in this context:
The provider secures the physical infrastructure and network
Correct. In the shared responsibility model, the cloud provider is responsible for securing the physical infrastructure, including the data centers and the physical servers, as well as the network (e.g., ensuring network security and availability). This is typically the provider's responsibility.
The customer manages physical hardware maintenance
Incorrect. The customer does not manage physical hardware maintenance in a cloud environment. This responsibility falls to the cloud provider, as they own and manage the physical infrastructure in their data centers. The customer focuses on higher-level responsibilities, such as securing the data and configuring access controls.
The provider implements data encryption for all stored records
Incorrect. While the cloud provider offers encryption capabilities (e.g., encrypting data at rest or in transit), data encryption of specific customer data (like patient records in this case) is typically the customer’s responsibility. The customer must configure the encryption and manage keys (though the provider may offer tools and services to assist with this).
The customer defines access policies for application users
Correct. The customer is responsible for managing access controls, including defining who can access the applications and the data (e.g., setting up role-based access controls, configuring permissions, etc.). This is a key part of securing the data and ensuring compliance with regulations like HIPAA in the healthcare industry.
A. The customer is responsible for defining access policies for application users in the shared responsibility model. This includes configuring access controls, managing user permissions, and ensuring that only authorized users can access the data stored in Azure.
B. In the shared responsibility model, the cloud provider is responsible for securing the physical infrastructure and network where the data is stored. This includes physical server security and virtualization, ensuring that the underlying infrastructure is protected from unauthorized access.
C.
The customer's responsibility in the shared responsibility model does not include managing physical hardware maintenance. This task is handled by the cloud provider as part of their infrastructure management.
D.
Wrong - Data encryption is the customer’s responsibility, not automatic by the provider.
Discussion
Think the marked answer is wrong, or have a better explanation? Share it below — comments appear after review.
