Examkin

Question

Difficulty: MediumCompliance and Governance

A municipal public transit authority is migrating its ticketing database and web applications to the AWS Cloud. During an audit, the compliance officer asks who is responsible for configuring firewall rules (such as security groups) to protect the applications, and how the authority can verify AWS's physical infrastructure compliance. Which of the following statements correctly identifies the responsibility mapping and the service needed to retrieve the necessary AWS compliance reports?

  1. The customer is responsible for configuring security groups; AWS compliance documents are retrieved using AWS Artifact.Answer
  2. B
    AWS is responsible for configuring security groups; AWS compliance documents are retrieved using AWS Artifact.
  3. C
    The customer is responsible for configuring security groups; AWS compliance documents are retrieved using AWS CloudTrail.
  4. D
    The customer is responsible for configuring security groups; AWS compliance documents are retrieved using AWS Trusted Advisor.

Answer

The customer is responsible for configuring security groups, and AWS compliance documents are retrieved using AWS Artifact.
Under the AWS Shared Responsibility Model, the customer is responsible for security 'in' the cloud, which includes defining firewall rules via security groups. To download AWS's official compliance documentation (like ISO and PCI certifications), the customer must use AWS Artifact, which is the central portal for these agreements and reports.

Step-by-Step Solution

1
Identify the security group configuration responsibility within the Shared Responsibility Model.
Customers are responsible for security 'in' the cloud, which includes configuring guest operating systems, network access control lists, and security groups.
AWS manages the global infrastructure, while the customer controls their resources and access configurations.
2
Identify the AWS service dedicated to providing compliance reports and agreements.
AWS Artifact provides on-demand access to AWS security and compliance reports (such as SOC and PCI reports) and online agreements.
Other services like CloudTrail or Trusted Advisor serve different auditing or optimization functions.

Key Concept

Understanding compliance reports retrieval and the Shared Responsibility Model boundaries.
Estimated Time:1m 0s
Rate this question

Topics

Compliance and Governance

More questions from this topic