Examkin

Question

Difficulty: EasyData Protection and Encryption

A cloud administrator is configuring security settings for an Amazon S3 bucket that will store proprietary company documents. To protect data at rest, which security action is the cloud administrator responsible for executing?

  1. Enabling server-side encryption on the Amazon S3 bucketAnswer
  2. B
    Upgrading the firmware on the physical storage devices hosting the S3 bucket
  3. C
    Installing security patches on the underlying hypervisors hosting Amazon S3
  4. D
    Decommissioning and physically destroying failed hard drives that stored the data

Answer

Enabling server-side encryption on the Amazon S3 bucket
Enabling server-side encryption is the correct action because under the AWS Shared Responsibility Model, the customer is responsible for data encryption configuration, identity management, and guest operating system security (security 'in' the cloud).

Step-by-Step Solution

1
Identify the data protection control needed in the scenario.
The goal is to protect data at rest within an S3 bucket.
This determines whether the control applies to user-configured settings or underlying cloud infrastructure.
2
Apply the AWS Shared Responsibility Model to the candidate tasks.
Configuring S3 bucket settings (like enabling server-side encryption) is classified as security 'in' the cloud, which is the customer's responsibility. Tasks like firmware updates, OS patching of hypervisors, and physical disk decommissioning are security 'of' the cloud, which is AWS's responsibility.
This distinguishes between customer-managed tasks and AWS-managed infrastructure tasks.

Key Concept

Under the AWS Shared Responsibility Model, customers are responsible for security 'in' the cloud (such as configuring data encryption at rest and in transit), while AWS is responsible for security 'of' the cloud (including the physical infrastructure, virtualization layer, and hardware maintenance).
Rate this question

Topics

Data Protection and Encryption

More questions from this topic