SAA-C03 Question 31
Select 3A company is hosting a web application on Amazon EC2 instances behind an Application Load Balancer. The company is concerned about the security and compliance of their environment. Based on the AWS shared responsibility model, which tasks are the customer's responsibility?
- A
Configuring security groups and network ACLs for the EC2 instances
- B
Ensuring the operating system running on the EC2 instances is patched and updated
- C
Maintaining the physical security of the data centers hosting the EC2 instances
- D
Encrypting sensitive data stored on the EC2 instances
- E
Monitoring the health and availability of the physical hardware underlying the EC2 instances
Show answer and explanation
Correct answers: A, B, D
Explanation
The AWS shared responsibility model defines that AWS is responsible for the security 'of' the cloud, while customers are responsible for the security 'in' the cloud. This means that AWS manages and secures the infrastructure hosting the services, including physical security, hardware, and software maintenance. Meanwhile, customers are responsible for securing their own applications, data, and configurations within the cloud environment. In this scenario, configuring security groups and network ACLs, patching the operating system, and encrypting data are all customer responsibilities.
- A. Correct.
Correct. Configuring security groups and network ACLs is part of the customer's responsibility under the shared responsibility model as it concerns securing their resources in the cloud.
- B. Correct.
Correct. Any tasks related to operating system patching, updating, and maintenance fall under the customer's responsibilities.
- C. Incorrect.
Incorrect. AWS is responsible for the physical security of the data centers as part of their obligations in the shared responsibility model.
- D. Correct.
Correct. Customers are responsible for encrypting sensitive data to ensure data protection and compliance with their security requirements.
- E. Incorrect.
Incorrect. AWS is responsible for maintaining the health and availability of the physical hardware as part of their infrastructure management responsibilities.