A compliance officer asks a security engineer about the Microsoft model for shared responsibility for AI security. The engineer needs to explain what security responsibilities remain with the customer when using Azure OpenAI as a PaaS service. Which of the following is a customer responsibility when using Azure OpenAI?
Select an answer to reveal the explanation.
Short Explanation and Infographic
Here's the deal — c is correct because in the Azure PaaS shared responsibility model, Microsoft is responsible for the physical infrastructure, platform maintenance, and service availability, while customers are responsible for: network access control configuration (private endpoints, firewall rules), authentication management (API keys vs. managed identity), application-level security controls such as content filtering configuration, logging setup, and proper use of the service.
Full explanation below image
Full Explanation
C is correct because in the Azure PaaS shared responsibility model, Microsoft is responsible for the physical infrastructure, platform maintenance, and service availability, while customers are responsible for: network access control configuration (private endpoints, firewall rules), authentication management (API keys vs. managed identity), application-level security controls such as content filtering configuration, logging setup, and proper use of the service. A is incorrect because patching and maintaining GPU infrastructure is Microsoft's responsibility for the PaaS Azure OpenAI service. B is incorrect because physical data center security is entirely Microsoft's responsibility in all cloud deployment models. D is incorrect because Azure OpenAI service endpoint availability (SLA) is Microsoft's responsibility; customer responsibility is designing resilient applications that handle service disruptions.