Examkin

Question

Difficulty: MediumShared Responsibility Model

A company is using Amazon ElastiCache (Redis OSS) to cache session data for a high-traffic web application. Under the AWS Shared Responsibility Model, which of the following are responsibilities of the customer? (Select TWO.)

  1. Configuring security groups to restrict network access to the cache nodesAnswer
  2. Enabling and managing encryption in transit and Redis authentication for client accessAnswer
  3. C
    Patching the guest operating system of the instances hosting the cache engine
  4. D
    Replacing failed physical memory modules in the physical servers hosting the database cache
  5. E
    Performing physical security audits of the AWS data centers where the cache data is stored

Answer

Configuring security groups to restrict network access to the cache nodes, and enabling and managing encryption in transit and Redis authentication for client access.
For managed services like Amazon ElastiCache, AWS manages the underlying virtual machines, OS patching, and physical infrastructure. The customer is responsible for configuring access controls, such as security groups, and managing authentication and encryption options to secure data within the cache.

Step-by-Step Solution

1
Identify the AWS service type in the scenario.
Amazon ElastiCache is a managed service (Platform as a Service/PaaS model).
The division of responsibilities depends on whether a service is Infrastructure as a Service (IaaS) or a managed service (PaaS).
2
Differentiate customer responsibilities from AWS responsibilities for managed services.
AWS handles underlying infrastructure, including physical security, hardware replacement, hypervisor management, and operating system patching. The customer handles configuration, data encryption settings, user authentication, and network access controls (security groups).
This alignment helps identify which tasks fall under customer ownership ('security in the cloud') vs AWS ownership ('security of the cloud').

Key Concept

Shared Responsibility Model for Managed Services
Rate this question

Topics

Shared Responsibility Model

More questions from this topic