Question

Contoso is deploying a custom web application to Azure App Service, a Platform as a Service (PaaS) offering. During a security review, the team wants to clarify which responsibilities belong to Contoso versus Microsoft under the shared responsibility model. Which task remains Contoso's responsibility in this PaaS scenario?

Accepted Answer

Securing the application code and configuring access to the data it manages

Answer

Patching the underlying operating system of the App Service hosts

Answer

Maintaining the physical security of the datacenter

Answer

Managing the physical network hardware and hypervisor