Examkin

Question

Difficulty: EasyShared Responsibility Model

A logistics company uses Amazon Simple Queue Service (SQS) to decouple its order processing systems. Under the AWS Shared Responsibility Model, which two of the following tasks are the responsibility of the customer?

  1. Configuring IAM policies to restrict access to the queueAnswer
  2. Enabling server-side encryption (SSE) on the queue using encryption keysAnswer
  3. C
    Upgrading and patching the operating systems of the servers running the SQS service
  4. D
    Managing the physical security and disposal of storage disks hosting the message queues
  5. E
    Replicating queue data across physical disks to prevent hardware-level data loss

Answer

Configuring IAM policies to restrict access to the queue, and enabling server-side encryption (SSE) on the queue using encryption keys.
For fully managed services like Amazon SQS, the customer is responsible for security 'in' the cloud, which includes configuring IAM policies to restrict queue access and enabling server-side encryption to protect data. AWS is responsible for security 'of' the cloud, including the underlying infrastructure, operating systems, and physical security.

Step-by-Step Solution

1
Identify the AWS service model type for Amazon SQS.
Amazon SQS is a fully managed service, meaning AWS handles all underlying infrastructure, servers, physical hardware, and operating systems.
Understanding the service type helps determine where the boundary of responsibility lies.
2
Determine customer responsibilities (security 'in' the cloud) for SQS.
The customer is responsible for data classification, encryption settings, and configuring identity and access management (IAM) policies to secure access to the queue.
Customer responsibilities for managed services focus on data protection and access configuration.
3
Identify AWS responsibilities (security 'of' the cloud) for SQS and eliminate matching options.
AWS handles OS patching, physical storage decommissioning, and infrastructure replication. Options describing these tasks are eliminated.
Infrastructure, physical security, and foundational service operations belong to AWS.

Key Concept

Under the AWS Shared Responsibility Model, for managed services like SQS, AWS manages the infrastructure layer (such as operating system updates, hardware maintenance, and physical security), while the customer remains responsible for data configuration, encryption settings, and access control policies.
Rate this question

Topics

Shared Responsibility Model

More questions from this topic