Examkin

Question

Difficulty: EasyShared Responsibility Model

A retail company is migrating a legacy web application to Amazon Elastic Compute Cloud (Amazon EC2) instances. Under the AWS Shared Responsibility Model, which TWO of the following security tasks are the responsibility of the customer?

  1. Patching the guest operating system installed on the EC2 instancesAnswer
  2. B
    Maintaining the physical security of the data centers hosting the EC2 instances
  3. Configuring the security group rules to control traffic to the EC2 instancesAnswer
  4. D
    Patching the underlying virtualization hypervisors that run the EC2 instances
  5. E
    Decommissioning and physically destroying retired storage device hardware

Answer

The customer is responsible for patching the guest operating system and configuring the security group rules.
Under the AWS Shared Responsibility Model, customers are responsible for security 'in' the cloud. For Amazon EC2 (an Infrastructure as a Service model), this includes managing the guest operating system (such as patching and updates) and configuring security group rules to control network traffic to and from the instances.

Step-by-Step Solution

1
Analyze the service model for Amazon EC2.
Amazon EC2 is an Infrastructure as a Service (IaaS) offering. AWS manages the physical facilities, hardware, and virtualization hypervisor, while the customer manages everything from the guest operating system upward.
To define the boundary of control between AWS and the customer.
2
Evaluate each task against the customer responsibility boundary.
Guest operating system patching and security group configurations are performed within the customer's administrative control. Physical security, hypervisor patching, and hardware destruction are performed by AWS at the infrastructure layer.
To determine which options represent customer responsibilities.

Key Concept

Shared Responsibility Model for IaaS
Estimated Time:1m 0s
Rate this question

Topics

Shared Responsibility Model

More questions from this topic