Examkin

Question

Difficulty: EasyShared Responsibility Model

A company uses Amazon Route 53 to host and manage its domain name system (DNS) records. Under the AWS Shared Responsibility Model, which of the following tasks is the customer's responsibility?

  1. A
    Securing the physical data centers where the Route 53 nameservers are located
  2. B
    Applying security patches to the host operating system of the Route 53 servers
  3. Creating and configuring the DNS records inside the Route 53 hosted zonesAnswer
  4. D
    Auditing the physical Route 53 infrastructure to compile compliance certifications

Answer

Creating and configuring the DNS records inside the Route 53 hosted zones
Under the AWS Shared Responsibility Model, configuring resources, defining entries, and managing access to the services that are provisioned are customer responsibilities. Creating and configuring DNS records within Route 53 hosted zones is a configuration task managed by the customer. AWS retains responsibility for the physical servers, OS patching, and network routing of the Route 53 infrastructure.

Step-by-Step Solution

1
Identify the service type and model boundary in the scenario.
Amazon Route 53 is a fully managed DNS service provided by AWS.
Determining if a service is managed or unmanaged helps define what the customer must configure versus what AWS maintains automatically.
2
Distinguish between infrastructure security and data/configuration management.
AWS secures the physical hardware and patching of Route 53 servers, while the customer controls DNS record definitions and hosted zone settings.
Under the Shared Responsibility Model, the customer is responsible for security 'in' the cloud (configurations, access policies, data), and AWS is responsible for security 'of' the cloud (physical security, hardware, hypervisors).

Key Concept

Shared Responsibility Model for Managed Services
Estimated Time:45s
Rate this question

Topics

Shared Responsibility Model

More questions from this topic