Examkin

Question

Difficulty: EasyShared Responsibility Model

A media streaming company uses Amazon CloudFront to distribute video files to global users. Under the AWS Shared Responsibility Model, which two of the following tasks are the responsibility of AWS?

  1. Maintaining the physical security of the edge locationsAnswer
  2. Patching the virtualization software and operating systems of the edge serversAnswer
  3. C
    Configuring geographic restrictions to restrict access to videos in specific regions
  4. D
    Securing the origin S3 bucket by configuring CloudFront Origin Access Control (OAC)
  5. E
    Uploading and managing SSL/TLS certificates for custom domains in CloudFront distributions

Answer

The correct answers are the options stating that AWS is responsible for maintaining the physical security of the edge locations, and patching the virtualization software and operating systems of the edge servers.
Under the AWS Shared Responsibility Model, AWS is responsible for security 'of' the cloud. This includes protecting the global infrastructure (Regions, Availability Zones, and Edge locations) that runs all of the services offered in the AWS Cloud. Therefore, maintaining the physical security of edge locations and patching the virtualization software and operating systems of the edge servers are both AWS responsibilities.

Step-by-Step Solution

1
Identify the service type and the specific resources being managed in the scenario.
The scenario involves Amazon CloudFront, which is a managed content delivery network (CDN) service deployed at AWS edge locations.
Understanding the service type helps determine where the boundary lies between customer configuration and AWS-managed infrastructure.
2
Distinguish between infrastructure-level security (security of the cloud) and configuration-level security (security in the cloud).
AWS is responsible for the physical security and infrastructure maintenance of edge locations. The customer is responsible for configuring access rules, geographic restrictions, and certificates.
This allows separation of the responsibilities to select the tasks handled by AWS.

Key Concept

AWS Shared Responsibility Model for managed Edge services
Rate this question

Topics

Shared Responsibility Model

More questions from this topic