Examkin

Question

Difficulty: MediumShared Responsibility Model

A financial data analysis firm uses a multi-node Amazon Redshift cluster to store and analyze large volumes of proprietary market data. Under the AWS Shared Responsibility Model, which TWO of the following security-related tasks are the responsibility of the customer? (Select TWO.)

  1. Configuring security groups to restrict network access to the Amazon Redshift clusterAnswer
  2. Managing database user accounts, roles, and permissions within the Redshift databaseAnswer
  3. C
    Applying security patches and updates to the operating system hosting the Redshift nodes
  4. D
    Replacing failing hard drives and physical hardware component failures in the data center
  5. E
    Performing physical decommissioning and destruction of storage drives used by the cluster

Answer

Configuring security groups to restrict network access to the Amazon Redshift cluster, and managing database user accounts, roles, and permissions within the Redshift database.
The correct responsibilities for the customer include configuring security groups to restrict network access to the cluster and managing database-level user accounts, roles, and permissions. These represent security 'in' the cloud, where the customer determines who can access the database and how network traffic is routed. AWS is responsible for security 'of' the cloud, which includes operating system patching, hardware maintenance, and physical media decommissioning.

Step-by-Step Solution

1
Identify the service type and shared responsibility boundaries.
Amazon Redshift is a managed data warehouse service. AWS manages the infrastructure (hardware, physical security, virtualization) and the platform/OS (patching, backups).
Understanding the service type helps differentiate between customer tasks (security 'in' the cloud) and AWS tasks (security 'of' the cloud).
2
Evaluate each option against customer versus AWS responsibilities.
Configuring network firewalls (security groups) and managing database-level authentication/authorization are customer responsibilities. Patching the underlying OS, replacing hardware, and decommissioning storage drives are AWS responsibilities.
This isolates the correct options from the distractors based on the Shared Responsibility Model.

Key Concept

Under the AWS Shared Responsibility Model for managed services like Amazon Redshift, AWS manages the operating system, hardware, and physical infrastructure, while the customer is responsible for data classification, network access controls (security groups), and identity and access management (IAM and database users).
Rate this question

Topics

Shared Responsibility Model

More questions from this topic