CLF-C02 Question 66
Select 3A company is hosting its web application on Amazon EC2 instances and storing data in Amazon S3. They are concerned about security and compliance. Which of the following are the customer's responsibilities in this scenario?
- A
Patching the operating system on the EC2 instances
- B
Ensuring that S3 bucket permissions are configured correctly
- C
Maintaining the physical security of the data centers hosting the EC2 instances
- D
Encrypting sensitive data stored in Amazon S3
- E
Managing the underlying hardware of the EC2 instances
Show answer and explanation
Correct answers: A, B, D
Explanation
The AWS Shared Responsibility Model divides responsibilities between AWS and the customer. AWS handles the security of the cloud (e.g., physical security and infrastructure), while customers are responsible for security in the cloud, which includes tasks like managing operating systems, configuring access controls, and encrypting data.
- A. Correct.
Correct: Customers are responsible for patching and maintaining the operating system on Amazon EC2 instances since it is part of their infrastructure responsibilities.
- B. Correct.
Correct: Customers must configure S3 bucket permissions to ensure data is secure and access is controlled, as this falls under the shared responsibility model.
- C. Incorrect.
Incorrect: AWS is responsible for the physical security of its data centers, as this is part of the AWS responsibilities under the shared responsibility model.
- D. Correct.
Correct: Customers are responsible for encrypting sensitive data stored in Amazon S3 to ensure proper security and compliance.
- E. Incorrect.
Incorrect: AWS manages the underlying hardware of EC2 instances as part of its infrastructure responsibilities.