Examkin

Question

Difficulty: MediumShared Responsibility Model

A digital marketing firm is hosting a data analytics application on AWS and has chosen to deploy its relational database using Amazon Relational Database Service (Amazon RDS). According to the AWS Shared Responsibility Model, which operational security task is the sole responsibility of the customer?

  1. Configuring network access rules using security groups and managing database user permissions.Answer
  2. B
    Applying operating system security patches to the servers hosting the database engine.
  3. C
    Replacing failed physical hard drives in the storage area networks that store the database backups.
  4. D
    Generating and downloading physical facility access logs for AWS data center compliance verification.

Answer

Configuring network access rules using security groups and managing database user permissions.
The option concerning security groups and user permissions is correct. Under the AWS Shared Responsibility Model, Amazon RDS is a managed service. While AWS is responsible for security 'of' the cloud (including database patching, physical infrastructure, and host OS maintenance), the customer remains responsible for security 'in' the cloud, which includes configuring database network access using security groups and managing database-level user accounts and authorization.

Step-by-Step Solution

1
Identify the AWS service type being used in the scenario.
Amazon RDS is an AWS managed database service (Platform-as-a-Service/PaaS).
The level of customer responsibility under the Shared Responsibility Model varies depending on whether the service is Infrastructure-as-a-Service (IaaS), Platform-as-a-Service (PaaS), or Software-as-a-Service (SaaS).
2
Determine the boundary of responsibility for Amazon RDS.
AWS manages the operating system, database patching, backups, physical infrastructure, and hardware. The customer manages database access control, network access configurations (security groups), and data encryption.
Since RDS is a managed service, AWS abstracts the underlying OS and hardware, shifting those security responsibilities from the customer to AWS.
3
Evaluate the choices against the customer's responsibilities for Amazon RDS.
Configuring security groups and user access is a customer responsibility. Operating system patching, physical hardware maintenance, and data center security logs are AWS responsibilities.
This isolates the correct task that falls on the customer under security 'in' the cloud.

Key Concept

Shared Responsibility Model for Managed Services (PaaS)
Rate this question

Topics

Shared Responsibility Model

More questions from this topic