CLF-C02 Question 61
Select 3You are responsible for deploying an application on Amazon EC2 instances. According to the AWS shared responsibility model, which of the following are your responsibilities?
- A
Managing the security group rules for the EC2 instances
- B
Ensuring the physical security of the data center where the EC2 instances are hosted
- C
Patching the operating system running on the EC2 instances
- D
Configuring IAM roles and policies to control access to the EC2 instances
- E
Maintaining the underlying hardware of the EC2 instances
Show answer and explanation
Correct answers: A, C, D
Explanation
In the AWS shared responsibility model, AWS is responsible for the security of the cloud (e.g., physical security, infrastructure, and managed services). Customers are responsible for security in the cloud, which includes configuring services, managing access, patching operating systems, and securing their applications. In this scenario, managing security groups, patching the OS, and configuring IAM roles fall under the customer's responsibilities, while AWS handles physical security and hardware maintenance.
- A. Correct.
Correct. Managing security group rules is the responsibility of the customer, as it involves configuring network access to the instance.
- B. Incorrect.
Incorrect. AWS is responsible for the physical security of its data centers as part of their shared responsibility model.
- C. Correct.
Correct. Patching the operating system on EC2 instances is the customer's responsibility because the customer controls the instances' software configuration.
- D. Correct.
Correct. Configuring IAM roles and policies is the customer's responsibility to manage access to resources securely.
- E. Incorrect.
Incorrect. AWS is responsible for maintaining the underlying hardware, including the physical servers where EC2 instances run.