CLF-C02 Question 57
Select 3An organization is planning to host its web application on Amazon EC2 instances. As part of their security review, they are trying to determine which tasks are their responsibility under the AWS shared responsibility model. Which of the following tasks are the customer's responsibility?
- A
Configuring security groups and network access rules for the EC2 instances
- B
Ensuring that the physical security of the data center is maintained
- C
Managing the operating system and application patches on the EC2 instances
- D
Ensuring that AWS hardware is maintained and replaced as needed
- E
Encrypting sensitive data stored on the EC2 instance's storage volumes
Show answer and explanation
Correct answers: A, C, E
Explanation
Under the AWS shared responsibility model, AWS takes responsibility for the security 'of' the cloud, including physical infrastructure, networking, and the underlying hardware. Customers, on the other hand, are responsible for the security 'in' the cloud, which includes tasks like configuring network access, managing operating systems and applications, and securing their data through encryption and access controls.
- A. Correct.
Correct. Customers are responsible for configuring security groups and network access rules to control the traffic to and from their EC2 instances.
- B. Incorrect.
Incorrect. AWS is responsible for the physical security of the data centers where its services are hosted.
- C. Correct.
Correct. Customers are responsible for managing the operating system and ensuring that application patches are applied to EC2 instances they manage.
- D. Incorrect.
Incorrect. AWS is responsible for maintaining and replacing its hardware infrastructure, including servers and storage devices.
- E. Correct.
Correct. Customers are responsible for encrypting sensitive data at rest or in transit, particularly when using services like EC2 that require direct customer management.