Examkin

Question

Difficulty: EasyShared Responsibility Model

A retail company runs its e-commerce website on several Amazon Elastic Compute Cloud (Amazon EC2) instances. Under the AWS Shared Responsibility Model, which of the following security tasks is the sole responsibility of AWS?

  1. A
    Configuring security group rules to restrict network access to the web servers
  2. B
    Installing security patches on the web servers' guest operating systems
  3. Decommissioning and physically destroying retired storage hardwareAnswer
  4. D
    Auditing and verifying that the web application code complies with industry regulations

Answer

Decommissioning and physically destroying retired storage hardware
Decommissioning and physically destroying retired storage hardware is the correct answer because physical security, infrastructure maintenance, and hardware disposal are part of security 'of' the cloud, which is the sole responsibility of AWS.

Step-by-Step Solution

1
Analyze the service type in the scenario
Amazon EC2 is an Infrastructure as a Service (IaaS) offering, where the customer manages the operating system, applications, and data, while AWS manages the physical infrastructure, virtualization hypervisor, and hardware.
Identifying the service type determines the boundary of responsibilities between the customer and AWS.
2
Evaluate the operational tasks against the Shared Responsibility Model
Physical hardware disposal and destruction belong to the security 'of' the cloud (managed by AWS). Configuring firewalls (security groups), patching the guest OS, and application compliance belong to security 'in' the cloud (managed by the customer).
Differentiating between security of the cloud and security in the cloud allows us to select the task owned by AWS.

Key Concept

Shared Responsibility Model
Estimated Time:45s
Rate this question

Topics

Shared Responsibility Model

More questions from this topic