CLF-C02 Question 67
Single answerWhich of the following is the responsibility of AWS under the Shared Responsibility Model?
- A
Managing the physical security of data centers
- B
Configuring security groups for customer applications
- C
Encrypting data stored in S3 buckets
- D
Defining the password policy for IAM users
Show answer and explanation
Correct answer: A
Explanation
Under the Shared Responsibility Model, AWS is responsible for the security 'of' the cloud, which includes managing the underlying infrastructure, such as physical security, hardware, and network components. Customers are responsible for security 'in' the cloud, which includes tasks like configuring security groups, encrypting data, and managing IAM password policies.
- A. Correct.
AWS is responsible for managing the physical security of its data centers as part of its responsibilities for the security 'of' the cloud.
- B. Incorrect.
Configuring security groups is the customer's responsibility because it involves securing customer applications and networks running 'in' the cloud.
- C. Incorrect.
Encrypting data in S3 buckets is the customer's responsibility, although AWS offers tools like SSE (Server-Side Encryption) to help with encryption.
- D. Incorrect.
Defining the password policy for IAM users is the customer's responsibility, as it involves managing access control and security 'in' the cloud.