Examkin

Question

Difficulty: MediumShared Responsibility Model

An enterprise is migrating its legacy web application to AWS and decides to run it inside Docker containers using AWS Fargate. Under the AWS Shared Responsibility Model, which two of the following operational tasks are the responsibility of the customer?

  1. Configuring the task security groups to control inbound and outbound network traffic to the container.Answer
  2. B
    Updating and patching the host operating system of the physical servers running the containers.
  3. Managing and applying security updates to the application code and libraries within the container image.Answer
  4. D
    Ensuring physical security controls are maintained at the AWS edge locations and data centers.
  5. E
    Upgrading the virtualization software and container runtime environment managed by AWS.

Answer

Configuring the task security groups to control inbound and outbound network traffic, and managing and applying security updates to the application code and libraries within the container image.
Under the AWS Shared Responsibility Model for AWS Fargate, the customer is responsible for security 'in' the cloud. This includes configuring task security groups to govern network access to the containerized application and managing the application code, dependencies, and libraries within the Docker image itself.

Step-by-Step Solution

1
Analyze the service model used in the scenario.
AWS Fargate is a serverless container execution engine where AWS manages the underlying hosts, operating systems, and container runtimes, while the customer retains control over the containers and network configuration.
Identifying the service type helps determine where the boundary of responsibility lies between AWS and the customer.
2
Evaluate the customer's responsibilities for container-based workloads.
The customer is responsible for everything they package inside the container (application code, dependencies, libraries) and how the container interacts with the network (security groups).
This isolates the correct options containing customer responsibilities.
3
Evaluate the AWS responsibilities for serverless container workloads.
AWS is responsible for physical security, host OS patching, and virtualization infrastructure.
This allows for the elimination of options representing AWS-managed responsibilities.

Key Concept

Under the AWS Shared Responsibility Model for container services like AWS Fargate, the customer is responsible for the configuration of security groups and the security of their containerized application code and libraries, while AWS handles physical security, host OS patching, and runtime environment updates.
Rate this question

Topics

Shared Responsibility Model

More questions from this topic