SAA-C03 Question 29
Select 3A company is planning to host a web application using Amazon EC2 instances and Amazon RDS for its database. The application will process sensitive customer data. Under the AWS shared responsibility model, which of the following tasks is the company responsible for?
- A
Encrypting the data stored in the Amazon RDS database
- B
Managing the physical security of the data center hosting the EC2 instances
- C
Applying security patches to the operating system of the EC2 instances
- D
Configuring network access control lists (NACLs) to restrict incoming and outgoing traffic
- E
Ensuring the hypervisor used by the EC2 instances is patched and secure
Show answer and explanation
Correct answers: A, C, D
Explanation
Under the AWS shared responsibility model, AWS is responsible for the security 'of' the cloud, including physical infrastructure and virtualization layers. Customers, on the other hand, are responsible for the security 'in' the cloud, which includes securing their data, configuring network security, and managing operating system patches and updates.
- A. Correct.
Correct: Under the shared responsibility model, the customer is responsible for securing their data, including encryption if needed.
- B. Incorrect.
Incorrect: AWS is responsible for the physical security of its data centers as part of its infrastructure security obligations.
- C. Correct.
Correct: Customers are responsible for managing and applying updates and patches to the operating system of their EC2 instances.
- D. Correct.
Correct: Customers are responsible for configuring network security, including network access control lists, to secure their resources.
- E. Incorrect.
Incorrect: AWS is responsible for maintaining the underlying hypervisor as part of its responsibilities for the managed infrastructure.