In the shared responsibility model, who is responsible for physical security inside Azure datacenters?
Show answer and explanation
Answer: B
Microsoft owns and operates the datacenters, so physical protection of those facilities, including guards, cameras, perimeter controls, and badge access, is Microsoft's job in every service model. The customer cannot perform these duties even in principle, because it never receives physical access to the buildings.
Sharing of responsibility only begins above the physical layer, at the network, operating system, and application levels depending on whether the workload is IaaS, PaaS, or SaaS.
Why the other options are wrong
- A. The customer never gets physical access to Azure facilities, so it cannot be the party securing them.
- C. Physical security is not split between parties; it belongs wholly to Microsoft in IaaS, PaaS, and SaaS alike.
- D. No third-party contractor hired by the customer secures Azure datacenters; those facilities are entirely under Microsoft's operational control.