Examkin

Question

Difficulty: EasyShared Responsibility Model

A company is developing a new mobile application and decides to store customer profile data in Amazon DynamoDB. Under the AWS Shared Responsibility Model, which of the following tasks is the customer responsible for?

  1. Configuring identity and access management (IAM) policies to control access to the tables.Answer
  2. B
    Patching the operating system of the servers hosting the database.
  3. C
    Replacing faulty physical storage drives in the AWS data center.
  4. D
    Applying security updates to the database software engine.

Answer

Configuring identity and access management (IAM) policies to control access to the tables.
In the AWS Shared Responsibility Model, Amazon DynamoDB is a fully managed service. For managed services, AWS takes care of the infrastructure, OS patching, and database software maintenance. The customer remains responsible for securing access to the data, which includes configuring IAM policies to control who can read or write to the database tables.

Step-by-Step Solution

1
Identify the AWS service model type for Amazon DynamoDB.
Amazon DynamoDB is a fully managed NoSQL database service.
Understanding the service type determines where the line of responsibility is drawn. In managed services, AWS takes over more operational responsibilities.
2
Determine the customer's responsibility boundary for managed database services.
For Amazon DynamoDB, AWS manages the hardware, operating system, and database software. The customer is responsible for data classification, encryption settings, and access control (IAM).
This allows us to identify that configuring access permissions is the customer's duty, while patching and physical maintenance are AWS's duty.

Key Concept

Shared Responsibility Model
Estimated Time:45s
Rate this question

Topics

Shared Responsibility Model

More questions from this topic