Question 1 of 17
A company moves its HR system to a SaaS application. The provider operates the datacenter and application infrastructure, but the company still decides who may access employee records and how those records are classified. Explain how the shared responsibility model applies in this scenario.
Strong Interview Answer
The company’s responsibility for managing its identities, access settings, and employee data remains, as this is a core element of the SaaS shared responsibility model. Microsoft handles the infrastructure, but the customer controls access and data classification. This means the company retains control over who can see what and how the data is categorized.
What to Listen For
- customer control of identities
- access management
- data classification
- SaaS shared responsibility model
Caution
Do not restate the question or ask for a product name.