CLF-C02 Question 68
Single answerWhich of the following is an AWS responsibility under the shared responsibility model?
- A
Patching the underlying physical infrastructure hosting the cloud environment
- B
Configuring security groups for an Amazon EC2 instance
- C
Managing customer data stored in an Amazon S3 bucket
- D
Encrypting data at rest within an Amazon RDS database
Show answer and explanation
Correct answer: A
Explanation
Under the shared responsibility model, AWS is responsible for the security of the cloud, which includes maintaining the physical infrastructure, hardware, and global network. Customers are responsible for security in the cloud, which includes configuring resources like security groups, managing data, and enabling encryption for their applications or data.
- A. Correct.
Correct. AWS is responsible for the security of the cloud, which includes patching and maintaining the underlying physical infrastructure.
- B. Incorrect.
Incorrect. Configuring security groups is the customer's responsibility as part of managing security in the cloud.
- C. Incorrect.
Incorrect. Managing customer data is the customer's responsibility, including ensuring data accuracy, privacy, and compliance.
- D. Incorrect.
Incorrect. Encrypting data at rest is a customer responsibility, though AWS provides tools like AWS Key Management Service (KMS) to help with encryption.