Examkin

Question

Difficulty: EasyShared Responsibility Model

A company hosts its customer database on an Amazon EC2 instance. Under the AWS Shared Responsibility Model, which of the following tasks is the sole responsibility of the customer?

  1. Installing security patches on the guest operating systemAnswer
  2. B
    Maintaining the physical power generators in the AWS data centers
  3. C
    Replacing decommissioned physical hard drives that stored database files
  4. D
    Upgrading the firmware on the physical host virtualization servers

Answer

Installing security patches on the guest operating system
Under the AWS Shared Responsibility Model, the customer is responsible for 'security in the cloud'. For Amazon EC2 (an Infrastructure as a Service offering), this includes configuration, updates, and security patching of the guest operating system. The correct option correctly identifies guest operating system patching as the customer's responsibility.

Step-by-Step Solution

1
Determine the service category for Amazon EC2
Amazon EC2 is classified as an Infrastructure as a Service (IaaS) offering.
IaaS services require the customer to perform administrative and configuration tasks starting from the operating system layer.
2
Distinguish between 'security in the cloud' and 'security of the cloud'
Guest operating system maintenance belongs to the customer ('security in the cloud'), whereas physical, hardware, and virtualization infrastructure security belongs to AWS ('security of the cloud').
This allocation defines the boundaries of the Shared Responsibility Model.

Key Concept

Shared Responsibility Model (IaaS Boundary)
Estimated Time:45s
Rate this question

Topics

Shared Responsibility Model

More questions from this topic