Examkin

Question

Difficulty: MediumCompliance and Governance

An automotive manufacturer is auditing its connected-vehicle telemetry platform hosted on AWS to verify compliance with ISO/IEC 27001 standards. Under the AWS Shared Responsibility Model, which compliance-related activity is the sole responsibility of the customer?

  1. A
    Maintaining physical security and environmental controls at the data centers where the vehicle data is stored
  2. B
    Installing security patches on the underlying virtualization hypervisors hosting the compute instances
  3. Managing access permissions and user roles within the AWS Identity and Access Management (IAM) serviceAnswer
  4. D
    Disposing of decommissioned storage drives and hardware components in compliance with industry standards

Answer

Managing access permissions and user roles within the AWS Identity and Access Management (IAM) service
Under the AWS Shared Responsibility Model, the customer is responsible for security 'in' the cloud. This includes configuring identity and access management (IAM) to control access to AWS resources. Managing access permissions and user roles is a customer task, while AWS is responsible for physical security of data centers, hypervisor patching, and hardware disposal.

Step-by-Step Solution

1
Analyze the compliance requirements and identify the operational boundaries defined by the AWS Shared Responsibility Model.
Establish that security 'of' the cloud (infrastructure, hardware, virtualization) belongs to AWS, while security 'in' the cloud (customer data, operating systems, access management) belongs to the customer.
This sets the foundation for distinguishing between AWS and customer responsibilities under compliance frameworks.
2
Evaluate each option against the responsibility boundaries.
Determine that physical security, hypervisor patching, and hardware disposal are security 'of' the cloud (AWS responsibilities). Managing access permissions and user roles via IAM is security 'in' the cloud (customer responsibility).
This allows the selection of the correct option that is the customer's sole responsibility.

Key Concept

AWS Shared Responsibility Model for Compliance
Rate this question

Topics

Compliance and Governance

More questions from this topic