Question

Your company deploys a business application on Azure virtual machines using an Infrastructure as a Service (IaaS) model. During a security audit, the team asks who is responsible for installing operating system updates and security patches on those virtual machines. Under the Azure shared responsibility model, who is responsible for this task?

Accepted Answer

The customer is responsible for patching the guest operating system.

Answer

Microsoft is always responsible for patching the guest operating system.

Answer

Responsibility is shared equally, with Microsoft applying updates automatically.

Answer

The internet service provider is responsible for operating system patching.