
Ultimate access to all questions.
A financial services company is planning to migrate its sensitive customer data to Microsoft Azure to leverage cloud computing benefits. The company operates in multiple jurisdictions and must ensure compliance with GDPR, among other regulatory requirements. According to the shared responsibility model in cloud computing, which of the following statements accurately describe the division of responsibilities between Microsoft Azure and the company for ensuring data security and compliance? Choose the two best options from the following.
A
Microsoft Azure is responsible for all aspects of data security and compliance, including the physical security of data centers, network infrastructure protection, and ensuring that all customer data automatically complies with GDPR without any action required from the company.
B
The company is responsible for configuring appropriate access controls and encryption for its data stored in Azure, ensuring that sensitive customer information is accessible only to authorized personnel and meets GDPR requirements.
C
Microsoft Azure provides a secure infrastructure and compliance certifications, but the company must utilize Azure's security features and services effectively to protect its data and ensure compliance with applicable laws and regulations.
D
The shared responsibility model in cloud computing places the entire burden of data security and compliance on the cloud customer, with no responsibilities assigned to the cloud provider like Microsoft Azure.
E
Both Microsoft Azure and the company share equal responsibility for all aspects of data security and compliance, with no distinct division of responsibilities between them.