CLF-C02 Question 62
Select 3You are hosting a web application on Amazon EC2 instances. Which of the following responsibilities falls under the customer's side of the AWS shared responsibility model?
- A
Configuring security groups for the EC2 instances
- B
Patching the operating system running on the EC2 instances
- C
Ensuring the physical security of the data centers where EC2 instances are hosted
- D
Managing the underlying hardware of the EC2 instances
- E
Encrypting sensitive data stored within the application
Show answer and explanation
Correct answers: A, B, E
Explanation
Under the AWS shared responsibility model, AWS manages the security of the cloud, which includes the physical infrastructure and hardware. The customer is responsible for managing security in the cloud, which includes configuring security groups, patching operating systems, and encrypting sensitive data. Understanding this division of responsibility is critical for ensuring secure and compliant cloud deployments.
- A. Correct.
Configuring security groups is the customer's responsibility, as it involves setting up rules to control traffic to and from the EC2 instances.
- B. Correct.
Patching the operating system is the customer's responsibility, since the customer manages the software running on the EC2 instances.
- C. Incorrect.
Ensuring physical security is AWS's responsibility, as AWS manages the infrastructure and physical security of its data centers.
- D. Incorrect.
Managing the underlying hardware is AWS's responsibility, as AWS maintains and operates the physical servers and infrastructure.
- E. Correct.
Encrypting sensitive data is the customer's responsibility, as the customer must ensure that their data is protected according to their security requirements.