Examkin

Question

Difficulty: MediumShared Responsibility Model

A healthcare provider plans to migrate its legacy patient database to Amazon RDS for MySQL. Under the AWS Shared Responsibility Model, which of the following operational tasks is the responsibility of the customer?

  1. A
    Replacing failed physical hard drives in the storage array where database backups are stored
  2. B
    Patching the underlying host operating system running the RDS database instance
  3. Configuring database user permissions and access control lists within the MySQL database engineAnswer
  4. D
    Configuring network firewalls at the physical perimeter of the AWS data centers

Answer

Configuring database user permissions and access control lists within the MySQL database engine
Under the AWS Shared Responsibility Model for managed services such as Amazon RDS, AWS is responsible for the security of the cloud. This includes physical data center security, host operating system patching, and hardware maintenance. The customer remains responsible for security in the cloud, which includes data classification, encryption settings, database user authentication, and managing granular privileges within the database itself.

Step-by-Step Solution

1
Identify the AWS service type in the scenario.
Amazon RDS is a managed database service (Platform as a Service / Database as a Service).
Defining the service model helps establish the boundary between customer and AWS responsibilities.
2
Differentiate between infrastructure management and data/access management tasks.
Tasks like physical hardware maintenance, host OS patching, and physical security belong to AWS. Database-level user permissions and data access control belong to the customer.
Applying the Shared Responsibility Model principles enables selection of the correct customer task.

Key Concept

Shared Responsibility Model for Managed Services
Rate this question

Topics

Shared Responsibility Model

More questions from this topic