AZ-900 Practice Question 1: Shared Responsibility Model
Microsoft Azure Fundamentals (AZ-900) · Test 1 · question 1 of 10
Under the Microsoft cloud shared responsibility model, which responsibility does the customer always retain, no matter whether the workload runs on IaaS, PaaS, or SaaS?
Show answer and explanation
Answer:
Microsoft's responsibility matrix lists a small set of responsibilities that stay with the customer in every deployment model, including on-premises: data, endpoints, accounts, and access management. Creating and removing user accounts, assigning RBAC roles, and deciding who may read the data is always the customer's job; Azure will happily let you grant Owner rights to the whole company if you configure it that way.
Option A is wrong because the guest OS is the customer's responsibility only in IaaS; in PaaS and SaaS Microsoft manages the operating system, so it is not an *always* answer. Options B and D are wrong in the other direction: the physical network and the hypervisor are Microsoft's responsibility in all three cloud service models, and are only the customer's problem in an on-premises datacenter.
Reference: Shared responsibility in the cloud