Examkin

Question

Difficulty: EasyShared Responsibility Model

A retail company hosts its e-commerce website on Amazon Elastic Compute Cloud (Amazon EC2) instances. Under the AWS Shared Responsibility Model, which of the following tasks is the customer's responsibility?

  1. Patching the guest operating system on the instancesAnswer
  2. B
    Patching the virtualization software on the physical hosts
  3. C
    Managing physical access controls to the AWS data centers
  4. D
    Replacing faulty physical hard drives in the storage racks

Answer

Patching the guest operating system on the instances
Under the AWS Shared Responsibility Model, Amazon EC2 is treated as an Infrastructure as a Service (IaaS). AWS is responsible for securing the underlying infrastructure (such as the hardware, physical data centers, and virtualization software), while the customer is responsible for configuring, updating, and patching the guest operating system that runs on the instance.

Step-by-Step Solution

1
Identify the AWS service type being used in the scenario.
Amazon EC2 is an Infrastructure as a Service (IaaS) offering.
The shared responsibility model boundaries vary depending on whether the service is IaaS, PaaS, or SaaS.
2
Determine the boundary of responsibility for IaaS services like Amazon EC2.
AWS manages security 'of' the cloud (hardware, virtualization, physical security), while the customer manages security 'in' the cloud (guest OS, application code, data configuration).
Since the customer has root access to the EC2 instances, they must configure and maintain the guest operating system.
3
Evaluate the choices to find the task that falls under security 'in' the cloud.
Patching the guest operating system is a customer responsibility, whereas physical security, host hardware replacement, and virtualization software maintenance are AWS responsibilities.
Guest OS updates require access to the instance's OS, which only the customer can configure.

Key Concept

AWS Shared Responsibility Model for IaaS (Amazon EC2)
Rate this question

Topics

Shared Responsibility Model

More questions from this topic