CLF-C02 Question 75
Select 4A company is migrating its application to AWS and is evaluating different services for their use. They want to understand how responsibilities between AWS and the customer differ when using Amazon EC2, Amazon RDS, and AWS Lambda. Which of the following statements correctly describes the shared responsibility model in this context?
- A
When using Amazon EC2, the customer is responsible for managing the operating system, including updates and security patches.
- B
For Amazon RDS, AWS manages the database engine, including backups and patching, while the customer is responsible for database optimization and user access management.
- C
With AWS Lambda, the customer is responsible for managing the underlying compute infrastructure, including scaling and patching the servers.
- D
For Amazon EC2, AWS is responsible for network-level security, such as protecting the physical hardware and global infrastructure.
- E
With AWS Lambda, the customer is only responsible for deploying their code and configuring function triggers, while AWS handles the underlying infrastructure.
Show answer and explanation
Correct answers: A, B, D, E
Explanation
The shared responsibility model outlines which security and operational tasks are managed by AWS and which are managed by the customer. For infrastructure services like Amazon EC2, customers have more responsibilities (e.g., managing the operating system). For managed services like Amazon RDS, AWS takes care of many operational tasks, but customers are still responsible for the data and optimization. In fully managed services like AWS Lambda, AWS manages almost everything except the customer's code and its proper configuration.
- A. Correct.
Correct. When using Amazon EC2, the customer is responsible for managing the operating system, including applying updates and security patches, as EC2 provides infrastructure as a service.
- B. Correct.
Correct. For Amazon RDS, AWS handles tasks like backups and patching of the database engine, while customers are responsible for tasks such as optimizing queries and managing database users.
- C. Incorrect.
Incorrect. With AWS Lambda, AWS manages the underlying compute infrastructure, including scaling and patching servers. Customers are not responsible for these tasks.
- D. Correct.
Correct. AWS is responsible for network-level security and protecting its physical hardware and global infrastructure, regardless of the service being used.
- E. Correct.
Correct. With AWS Lambda, customers are only responsible for their code and configuration of function triggers, while AWS takes care of the underlying infrastructure.