CLF-C02 Question 72
Select 3A company is using Amazon EC2 instances to host its web application. Which of the following is the responsibility of the customer under the AWS shared responsibility model?
- A
Configuring security groups for the EC2 instances
- B
Patching the underlying physical hardware of the EC2 instances
- C
Ensuring that data stored on the EC2 instances is encrypted
- D
Maintaining the networking infrastructure for the EC2 instances
- E
Managing the operating system installed on the EC2 instances
Show answer and explanation
Correct answers: A, C, E
Explanation
In the AWS shared responsibility model, AWS manages the security 'of' the cloud, which includes physical infrastructure and core networking. Customers are responsible for the security 'in' the cloud, which includes configuring security groups, managing operating systems, and ensuring their data is encrypted. This ensures customers retain control over their resources while AWS handles the underlying infrastructure.
- A. Correct.
Configuring security groups is the customer's responsibility because it involves controlling inbound and outbound traffic for the EC2 instance, which falls under the customer's control.
- B. Incorrect.
Patching the underlying physical hardware is AWS's responsibility as part of maintaining the infrastructure and ensuring its availability and reliability.
- C. Correct.
Ensuring data encryption on the EC2 instances is the customer's responsibility as part of securing their applications and data.
- D. Incorrect.
Maintaining the networking infrastructure is AWS's responsibility, as they control the physical and core networking components of the cloud environment.
- E. Correct.
Managing the operating system, including patching and updates, is the customer's responsibility when using Amazon EC2 instances.