Examkin

Question

Difficulty: EasyShared Responsibility Model

A company is migrating its relational database to Amazon RDS (Relational Database Service) to reduce operational overhead. Under the AWS Shared Responsibility Model, which two of the following tasks are the responsibility of the customer? (Select TWO.)

  1. Configuring database-level user access and permissionsAnswer
  2. B
    Installing operating system security patches on the database server
  3. Enabling encryption at rest for the database instancesAnswer
  4. D
    Replacing failed physical storage drives in the AWS data center hosting the database
  5. E
    Performing underlying virtualization hypervisor updates

Answer

Configuring database-level user access and permissions AND Enabling encryption at rest for the database instances
Under the AWS Shared Responsibility Model for Amazon RDS, the customer is responsible for security 'in' the cloud. This includes configuring database-level user access and permissions to control access to the data, and enabling data encryption features (such as encryption at rest). AWS, on the other hand, is responsible for security 'of' the cloud, which includes managing the underlying physical infrastructure, virtualization layer, and OS-level patching.

Step-by-Step Solution

1
Identify the AWS service and its type in the Shared Responsibility Model.
Amazon RDS is a managed service (PaaS-like database service), which offloads operating system and database engine maintenance to AWS.
Understanding the service type helps determine the boundary of responsibilities between AWS and the customer.
2
Evaluate the proposed tasks against customer-side responsibilities (security 'in' the cloud) for Amazon RDS.
Configuring database-level user permissions and enabling encryption at rest are customer responsibilities. Tasks like OS patching, hardware replacement, and hypervisor updates are handled by AWS.
To select the correct options, we must classify each task as either the customer's or AWS's responsibility.

Key Concept

Shared Responsibility Model for Managed Services (PaaS)
Estimated Time:1m 0s
Rate this question

Topics

Shared Responsibility Model

More questions from this topic