A city moves a virtual machine to Azure and assumes Microsoft now patches the guest OS and every application. Under the shared responsibility model for IaaS, which statement is correct?
Select an answer to reveal the explanation.
Short Explanation
Lift-and-shift does not mean "Microsoft babysits the guest OS." On IaaS, the provider minds the building and host; the city still patches the OS, apps, data, and who can sign in. Shared responsibility is a handoff of layers, not a vacation from security.
Full Explanation
In the Azure shared responsibility model for infrastructure as a service, Microsoft secures the underlying physical infrastructure and host environment. Customers remain responsible for securing the guest operating system, applications, data, and identities. Assuming the provider patches every municipal app after a VM move is a common misconception.