Examkin

Question

Difficulty: MediumCompliance and Governance

A logistics company is migrating its supply chain database to AWS. The compliance team needs to verify how regulatory compliance is managed under the AWS Shared Responsibility Model. Which of the following compliance-related activities is the sole responsibility of AWS?

  1. A
    Updating and patching the operating system of the EC2 instances hosting the database.
  2. B
    Retrieving and storing AWS compliance documents such as SOC reports using AWS Systems Manager.
  3. Maintaining the physical security and environmental controls of the data centers hosting the database.Answer
  4. D
    Recording and auditing all database-related API calls and user access logs using Amazon CloudWatch.

Answer

Maintaining the physical security and environmental controls of the data centers hosting the database.
AWS is responsible for security 'of' the cloud, which includes protecting the physical infrastructure (hardware, software, networking, and facilities) that runs all of the services offered in the AWS Cloud.

Step-by-Step Solution

1
Analyze the requirements under the AWS Shared Responsibility Model.
Identify that AWS is responsible for security 'of' the cloud, while the customer is responsible for security 'in' the cloud.
This establishes the framework to classify which compliance task belongs to which party.
2
Evaluate the options to identify which task belongs to AWS's infrastructure management.
Determine that physical security and environmental controls of data centers are managed solely by AWS, whereas operating systems, report downloads, and logging configurations are managed by the customer.
This isolates the correct option showing the AWS-managed compliance control.

Key Concept

Shared Responsibility Model for Compliance
Rate this question

Topics

Compliance and Governance

More questions from this topic