Examkin

Question

Difficulty: EasyShared Responsibility Model

A startup is deploying a containerized microservices application using Amazon ECS on AWS Fargate. Under the AWS Shared Responsibility Model, which of the following tasks are the responsibility of the customer? (Select TWO.)

  1. Defining container task settings, including specifying the container images and CPU/memory allocations.Answer
  2. Configuring security groups to control network traffic to the container tasks.Answer
  3. C
    Patching the underlying host operating systems and hypervisors that run the containers.
  4. D
    Configuring stateless Network Access Control Lists (Network ACLs) at the container level to secure individual tasks.
  5. E
    Requesting third-party compliance certificates for the physical data centers by opening a support ticket.

Answer

The customer is responsible for defining container task settings (such as specifying container images and resource allocations) and configuring security groups to control traffic to the tasks.
Under the AWS Shared Responsibility Model for serverless containers using Amazon ECS on AWS Fargate, AWS manages the underlying infrastructure, physical hosts, and host operating system patching. The customer is responsible for configuring the container task definitions (specifying the image, CPU, and memory) and setting up security groups to control network traffic to the tasks.

Step-by-Step Solution

1
Identify the AWS service model type.
Amazon ECS on AWS Fargate is a serverless, managed compute service.
Understanding the service model helps determine where the boundary lies between customer and AWS responsibilities.
2
Separate infrastructure management from application and access configuration.
AWS manages physical security, hosts, hypervisors, and operating systems. The customer manages task configuration and access control (security groups).
In serverless container deployments, everything inside the container task definition and its network access rules remains the customer's responsibility.

Key Concept

Shared Responsibility Model
Estimated Time:1m 0s
Rate this question

Topics

Shared Responsibility Model

More questions from this topic