A mayor assumes that moving municipal virtual machines to the cloud means the provider now patches every guest OS and every city application. Under a typical IaaS shared-responsibility model, what remains the city's responsibility?
Select an answer to reveal the explanation.
Short Explanation
Moving the VMs is like renting an apartment building—the landlord keeps the lobby and structure safe, but you still lock your unit and maintain what is inside. On IaaS the provider handles facilities and host; the city still patches guest OS, apps, data, and identities. The mayor’s assumption skips that apartment-level work.
Full Explanation
In IaaS, the provider typically secures the physical facilities, networking fabric, and hypervisor host layer, while the customer retains responsibility for guest operating systems, applications, data, and identity configuration. Migrating VMs to the cloud does not by itself transfer guest patching or application security to the provider. Understanding this split prevents unsafe assumptions after lift-and-shift projects.