Question

A compliance auditor asks a company that runs all of its workloads in Microsoft Azure who is responsible for the physical security of the datacenters, including guards, fencing, and hardware disposal. Under the shared responsibility model, which party holds this responsibility regardless of whether the workload is IaaS, PaaS, or SaaS?

Accepted Answer

The cloud provider (Microsoft) is always responsible for physical datacenter security.

Answer

The customer, because they own the data processed in the datacenter.

Answer

The responsibility is shared equally between the customer and Microsoft.

Answer

It depends on the service model; for IaaS the customer is responsible for physical security.