CLF-C02 Question 65
Select 3You are hosting a web application on Amazon EC2 instances and using Amazon S3 for storing static assets. Which of the following are responsibilities of the customer under the AWS Shared Responsibility Model?
- A
Configuring security groups to control traffic to the EC2 instances
- B
Managing the physical security of the data center where the EC2 instances are hosted
- C
Patching the operating system running on the EC2 instances
- D
Setting up IAM policies to control access to the S3 bucket
- E
Ensuring that AWS maintains the availability of the S3 service
Show answer and explanation
Correct answers: A, C, D
Explanation
Under the AWS Shared Responsibility Model, the customer is responsible for the security and management of resources they control, such as configuring security settings, managing operating systems, and setting up access controls. AWS is responsible for the underlying infrastructure, including physical security and ensuring service availability.
- A. Correct.
Correct. Configuring security groups to control traffic is the customer's responsibility because it involves managing the security of their own resources in the cloud.
- B. Incorrect.
Incorrect. Physical security of data centers is managed by AWS as part of their responsibilities.
- C. Correct.
Correct. Patching the operating system on EC2 instances is the customer's responsibility since the customer has control over the operating system.
- D. Correct.
Correct. Setting up IAM policies to manage access to S3 is the customer's responsibility under the Shared Responsibility Model.
- E. Incorrect.
Incorrect. Ensuring the availability of the S3 service is an AWS responsibility, as it pertains to the infrastructure they manage.