Examkin

Question

Difficulty: MediumShared Responsibility Model

A game development studio is deploying dedicated multiplayer game servers on Amazon Elastic Compute Cloud (Amazon EC2). According to the AWS Shared Responsibility Model, which two operational security tasks are the responsibility of the customer? (Select TWO.)

  1. Patching the guest operating system of the game server instancesAnswer
  2. Configuring the guest operating system firewalls on the EC2 instancesAnswer
  3. C
    Patching the underlying virtualization hypervisors hosting the EC2 instances
  4. D
    Performing physical hardware maintenance on the host servers in AWS data centers
  5. E
    Conducting physical security audits of the AWS data centers to verify ISO compliance

Answer

The customer is responsible for patching the guest operating system of the game server instances and configuring the guest operating system firewalls on the EC2 instances.
Under the AWS Shared Responsibility Model, Amazon EC2 is treated as an Infrastructure as a Service (IaaS) model. In this setup, the customer maintains control of the guest operating system, which includes the responsibility to apply OS patches and configure software firewalls within the instances. AWS handles the physical infrastructure and the virtualization layer.

Step-by-Step Solution

1
Identify the service type and model boundary in the scenario.
Amazon EC2 is an Infrastructure as a Service (IaaS) offering, meaning the customer maintains full control over the guest operating system, network configurations, and data.
Determining whether the service is IaaS, PaaS, or SaaS helps establish where the boundary between customer and AWS responsibility lies.
2
Differentiate between security 'of' the cloud and security 'in' the cloud.
AWS secures the global infrastructure, physical hardware, and virtualization layers. The customer secures their data, operating systems, and network access controls.
Categorizing tasks using this distinction helps identify which responsibilities belong to the customer.

Key Concept

Shared Responsibility Model for IaaS Services
Rate this question

Topics

Shared Responsibility Model

More questions from this topic