Examkin

Question

Difficulty: EasyShared Responsibility Model

A non-profit organization stores its public files in Amazon S3 and runs a web application on Amazon EC2 instances. Which two of the following tasks are the responsibility of AWS under the AWS Shared Responsibility Model?

  1. Maintaining physical security of the data centers hosting the infrastructureAnswer
  2. Disposing of decommissioned physical storage devicesAnswer
  3. C
    Configuring access policies and permissions for the Amazon S3 buckets
  4. D
    Installing security patches on the guest operating system of the EC2 instances
  5. E
    Configuring security group rules to control network traffic to the EC2 instances

Answer

AWS is responsible for maintaining the physical security of the data centers and securely disposing of decommissioned physical storage devices.
Under the AWS Shared Responsibility Model, AWS is responsible for security 'of' the cloud. This includes physical data center security and hardware lifecycle tasks, such as destroying decommissioned physical storage drives.

Step-by-Step Solution

1
Identify the service models described in the scenario.
Amazon S3 (a managed object storage service) and Amazon EC2 (an Infrastructure as a Service, or IaaS, compute service) are used.
This establishes where the boundary of responsibility is drawn for each service.
2
Distinguish between responsibilities for security 'of' the cloud and security 'in' the cloud.
AWS handles the security 'of' the cloud (physical infrastructure, hardware, and the virtualization layer). The customer handles the security 'in' the cloud (guest operating systems, application configurations, firewall rules, and data access policies).
This division is the foundational logic of the AWS Shared Responsibility Model.
3
Evaluate the choices to see which are managed by AWS.
Physical data center security and physical storage device disposal belong to AWS. Configuring S3 bucket permissions, patching the EC2 guest operating system, and managing security groups are operational tasks managed by the customer.
This identifies the two correct responsibilities assigned to AWS.

Key Concept

AWS Shared Responsibility Model
Estimated Time:1m 0s
Rate this question

Topics

Shared Responsibility Model

More questions from this topic