Examkin

Question

Difficulty: EasyShared Responsibility Model

An educational institution uses Amazon Simple Storage Service (Amazon S3) to store student records. Under the AWS Shared Responsibility Model, which of the following are responsibilities of the customer? (Select TWO.)

  1. Configuring bucket policies to restrict access to authorized usersAnswer
  2. Enabling encryption on the stored objectsAnswer
  3. C
    Managing physical access to the storage hardware
  4. D
    Replacing failed hard drives in the storage arrays
  5. E
    Patching the underlying host operating systems of the S3 service

Answer

Configuring bucket policies to restrict access and enabling encryption on the stored objects are customer responsibilities under the AWS Shared Responsibility Model.
For managed services like Amazon S3, AWS manages the infrastructure, OS patching, and physical security. The customer remains responsible for managing their data, which includes configuring bucket access policies and setting up object encryption.

Step-by-Step Solution

1
Analyze the AWS service model for Amazon S3.
Amazon S3 is an abstract managed service. AWS maintains the underlying hardware, virtualization, and OS layers.
This helps locate the responsibility boundary for this service.
2
Determine customer responsibilities for data and access within S3.
The customer owns the data and is responsible for setting bucket access policies and managing data protection features like encryption.
This identifies the customer's operational obligations.

Key Concept

Under the AWS Shared Responsibility Model, AWS manages security 'of' the cloud (hardware, host software, physical facilities), while customers manage security 'in' the cloud (access policies, data encryption, IAM).
Estimated Time:1m 0s
Rate this question

Topics

Shared Responsibility Model

More questions from this topic