Examkin

Question

Difficulty: EasyShared Responsibility Model

A media streaming company uses Amazon CloudFront to distribute video content to users worldwide. Under the AWS Shared Responsibility Model, which two of the following security tasks are the responsibility of the customer? (Select TWO.)

  1. Configuring Geo Restriction to prevent access from specific geographic locationsAnswer
  2. Restricting access to content using signed URLs or signed cookiesAnswer
  3. C
    Applying software updates and security patches to edge location servers
  4. D
    Protecting the physical infrastructure hosting CloudFront edge locations
  5. E
    Performing compliance audits of the physical edge server hardware

Answer

Configuring Geo Restriction to prevent access from specific geographic locations, and restricting access to content using signed URLs or signed cookies are the responsibilities of the customer.
Configuring Geo Restriction and restricting access using signed URLs or signed cookies are both customer tasks. Under the Shared Responsibility Model, the customer is responsible for configuring access controls and protecting their data/content (Security in the Cloud).

Step-by-Step Solution

1
Analyze the service model type for Amazon CloudFront.
Amazon CloudFront is a managed global content delivery network (CDN) service.
Managed services shift physical and server-level infrastructure management to AWS, while the customer retains control over configuration, data access, and content protection.
2
Distinguish between customer responsibilities (security 'in' the cloud) and AWS responsibilities (security 'of' the cloud) for CloudFront.
AWS manages physical security of edge locations, hardware maintenance, and edge server patching. The customer manages content access settings (Geo Restriction, signed URLs/cookies) and viewer encryption certificates.
This allows identifying the tasks that the customer must perform to secure their content delivery.

Key Concept

AWS Shared Responsibility Model for managed services, specifically distinguishing customer-side configuration responsibilities from AWS-side infrastructure management.
Rate this question

Topics

Shared Responsibility Model

More questions from this topic