CLF-C02 Question 70
Select 2You are running a web application on Amazon EC2 instances within your AWS account. Which of the following are responsibilities that AWS handles under the shared responsibility model?
- A
Patching and maintaining the underlying physical servers hosting the EC2 instances
- B
Configuring security groups and network ACLs for your EC2 instances
- C
Providing physical security for the data centers where the EC2 instances are hosted
- D
Ensuring the operating system running on your EC2 instances is patched and updated
- E
Encrypting the data stored on your EC2 instances by default
Show answer and explanation
Correct answers: A, C
Explanation
Under the shared responsibility model, AWS manages the security 'of' the cloud, such as physical infrastructure, hardware, and facilities. Customers are responsible for the security 'in' the cloud, which includes configuring security settings, managing data, and patching operating systems on EC2 instances. This distinction ensures that both parties are clear about their roles in maintaining a secure environment.
- A. Correct.
AWS is responsible for maintaining and patching the hardware and physical servers that host your EC2 instances as part of their responsibility for the underlying infrastructure.
- B. Incorrect.
Configuring security groups and network ACLs is the customer's responsibility, as it involves managing access to and from your own resources.
- C. Correct.
AWS is responsible for providing physical security for its data centers, which includes securing the facilities where your EC2 instances are hosted.
- D. Incorrect.
The customer is responsible for managing the operating system running on their EC2 instances, including applying patches and updates.
- E. Incorrect.
Encrypting the data on EC2 instances is a customer responsibility. AWS provides services and tools to enable encryption but does not enable it by default.