Examkin

Question

Difficulty: MediumShared Responsibility Model

A software development firm is deploying its microservices-based application using Amazon Elastic Container Service (Amazon ECS) with the AWS Fargate launch type. Under the AWS Shared Responsibility Model, which of the following tasks is the responsibility of the customer?

  1. Configuring security groups to control network traffic allowed to reach the containersAnswer
  2. B
    Patching the underlying host operating system and hypervisor hosting the container tasks
  3. C
    Configuring stateless Network Access Control Lists (NACLs) directly inside the container runtime environment
  4. D
    Retrieving physical data center security compliance reports directly from the Fargate host systems

Answer

Configuring security groups to control network traffic allowed to reach the containers
Under the AWS Shared Responsibility Model, the customer is responsible for 'security in the cloud.' When using AWS Fargate, AWS handles the host operating system, hypervisor, and physical security. The customer maintains control over, and responsibility for, configuring the security groups to manage inbound and outbound network traffic to their container tasks.

Step-by-Step Solution

1
Identify the service deployment model used in the scenario.
The application runs on Amazon ECS using the AWS Fargate launch type, which is a serverless/managed container environment.
Determining the service type helps define the boundary lines of the Shared Responsibility Model, separating customer tasks from AWS infrastructure tasks.
2
Evaluate the operational tasks against customer and AWS boundaries.
Configuring security groups to filter container traffic is a customer task, while host patching, physical security, and direct host compliance access are managed by AWS.
Under the Shared Responsibility Model, customers are responsible for managing access configurations (security in the cloud) such as security groups for container tasks.

Key Concept

Shared Responsibility Model
Rate this question

Topics

Shared Responsibility Model

More questions from this topic