Examkin

Question

Difficulty: MediumShared Responsibility Model

A media streaming company uses Amazon CloudFront to deliver video content to users globally. Under the AWS Shared Responsibility Model, which TWO of the following tasks are the responsibility of AWS?

  1. A
    Configuring Viewer Protocol Policies to enforce HTTPS communication between viewers and the distribution
  2. Maintaining and securing the physical infrastructure at global edge locationsAnswer
  3. Patching and updating the underlying software and firmware on CloudFront edge serversAnswer
  4. D
    Restricting access to sensitive media content using signed URLs or signed cookies
  5. E
    Performing physical on-site inspections of edge locations to audit compliance with industry standards

Answer

The responsibilities of AWS are maintaining and securing the physical infrastructure at global edge locations, and patching and updating the underlying software and firmware on CloudFront edge servers.
Under the AWS Shared Responsibility Model, AWS is responsible for the security 'of' the cloud. For a managed service like Amazon CloudFront, this includes managing the physical security of the global edge locations where content is cached, and patching the software and firmware of the edge servers. Configuring distribution settings, such as forcing HTTPS (Viewer Protocol Policy) or restricting access with signed URLs, are customer responsibilities (security 'in' the cloud). Additionally, customers cannot conduct physical audits of AWS facilities; they must retrieve compliance reports via AWS Artifact.

Step-by-Step Solution

1
Identify the service type of Amazon CloudFront.
Amazon CloudFront is a managed global content delivery network (CDN) service.
Determining the service type helps identify where the boundary lies in the Shared Responsibility Model.
2
Analyze AWS's responsibilities for a managed CDN service.
AWS is responsible for the security 'of' the cloud, which includes physical security of the edge location data centers and patching the underlying software/firmware on the edge servers.
This identifies the correct options representing AWS-managed tasks.
3
Identify and eliminate customer-side responsibilities.
Configuring viewer protocol policies (HTTPS), setting up signed URLs/cookies, and retrieving compliance reports via AWS Artifact (instead of physical data center audits) are customer responsibilities.
This helps verify that the distractors represent security 'in' the cloud tasks managed by the customer.

Key Concept

Shared Responsibility Model for Managed Services
Rate this question

Topics

Shared Responsibility Model

More questions from this topic