CLF-C02 Question 73
Select 3A company is evaluating its responsibilities when using different AWS services. Which of the following reflects the division of responsibilities between the customer and AWS when running workloads on Amazon EC2, Amazon RDS, and AWS Lambda?
- A
The customer is responsible for patching the underlying operating system when using Amazon EC2.
- B
AWS is responsible for scaling the infrastructure automatically when using Amazon EC2.
- C
The customer is responsible for managing database backups when using Amazon RDS unless configured otherwise.
- D
AWS handles the execution and scaling of code with AWS Lambda.
- E
The customer is responsible for securing the physical infrastructure when using any AWS service.
Show answer and explanation
Correct answers: A, C, D
Explanation
The shared responsibility model varies depending on the AWS service used. For Amazon EC2, customers are responsible for managing the operating system and applications running on the instance. For Amazon RDS, while AWS manages the underlying infrastructure, customers must configure backups to their requirements. AWS Lambda abstracts infrastructure management entirely, handling execution and scaling, so customers only need to provide and manage their code. Physical security is always AWS's responsibility across all services.
- A. Correct.
Correct. When using Amazon EC2, the customer is responsible for managing the underlying operating system, including patching and updates, as part of the shared responsibility model.
- B. Incorrect.
Incorrect. AWS does not automatically scale Amazon EC2 instances; customers must configure scaling policies using services like Auto Scaling.
- C. Correct.
Correct. By default, AWS automates database backups for Amazon RDS, but customers are responsible for configuring and ensuring the backups meet their specific requirements.
- D. Correct.
Correct. With AWS Lambda, AWS manages the execution environment, scaling, and server infrastructure, allowing customers to focus on their application code.
- E. Incorrect.
Incorrect. Securing the physical infrastructure is always AWS's responsibility as part of the shared responsibility model.