Exam SC-900 topic 1 question 173 discussion

A is correct https://learn.microsoft.com/en-us/azure/security/fundamentals/shared-responsibility Responsibility always retained by the customer: - Information and Data - Devices (Mobile and PCs) - Accounts and Identities

Tricky question because they mentioned "... and user devices for a cloud-based app". As far as I know, Intune has been removed from the SC-900 exam. That said, "Intune is a cloud-based endpoint management solution that securely manages identities, apps, and devices". That is why I would go with 'SaaS', just in case. https://learn.microsoft.com/en-us/intune/intune-service/fundamentals/what-is-intune https://learn.microsoft.com/en-us/credentials/certifications/resources/study-guides/sc-900

Answer is SaaS https://learn.microsoft.com/en-us/azure/security/fundamentals/shared-responsibility

The question says 'plan to manage' only data, user accounts, and devices. SaaS is more of a fully managed model. With PaaS, I can manage the data and user accounts while the cloud provider manages the underlying infrastructure, runtime, middleware, OS, and virtualization. Devices can be managed through various services offered within the PaaS model, which often include advanced capabilities for application development, business analytics, and IoT services

I feel like this question is missing context. The correct answer can be SaaS or PaaS depending on the need for this to be 'fully managed'. SaaS definitely works. PaaS can manage the data and user accounts while the cloud provider manages the underlying infrastructure, runtime, middleware, OS, and virtualization. Devices can be managed through various services offered within the PaaS model, which often include advanced capabilities for application development, business analytics, and IoT services

Intune, is that you?