CLF-C02 Question 64
Select 3A company is migrating its applications to AWS and is trying to understand the shared responsibility model. Which of the following tasks are the customer's responsibility when using AWS services?
- A
Configuring security group rules to control inbound and outbound traffic
- B
Managing the physical security of the data centers where AWS resources are hosted
- C
Patching the operating system of an EC2 instance they have launched
- D
Ensuring data encryption is implemented for sensitive information stored in Amazon S3
- E
Maintaining the hardware components that run their applications on AWS
Show answer and explanation
Correct answers: A, C, D
Explanation
Under the AWS Shared Responsibility Model, AWS manages the security 'of' the cloud (e.g., physical infrastructure and global network), while customers are responsible for the security 'in' the cloud (e.g., configuring security settings, managing data, and operating system patches). In this scenario, configuring security group rules, patching operating systems, and ensuring data encryption fall under the customer’s responsibilities.
- A. Correct.
Correct. Configuring security group rules is part of the customer's responsibility, as it involves setting up access control for their resources.
- B. Incorrect.
Incorrect. Physical security of data centers is the responsibility of AWS, as part of its responsibility for the underlying infrastructure.
- C. Correct.
Correct. Managing the operating system, including patching, is the customer's responsibility when using EC2 instances, as it is considered part of the resources under their control.
- D. Correct.
Correct. Ensuring data encryption, such as enabling server-side or client-side encryption for sensitive data in S3, is the customer's responsibility as part of securing their data.
- E. Incorrect.
Incorrect. AWS is responsible for maintaining the hardware components that power the cloud, as part of its infrastructure responsibilities.