Examkin

Soru

Zorluk: OrtaShared Responsibility Model

A media streaming company uses Amazon DynamoDB to store user watch histories and profiles. Under the AWS Shared Responsibility Model, which of the following tasks is the responsibility of the customer?

  1. Defining Identity and Access Management (IAM) policies to restrict read and write access to the database tablesCevap
  2. B
    Patching the underlying operating system and database engine running the DynamoDB service
  3. C
    Configuring stateless network Access Control Lists (NACLs) directly on the DynamoDB database instances to manage incoming traffic
  4. D
    Requesting compliance certification documents for physical data center security by contacting AWS Support directly rather than using AWS Artifact

Cevap

Defining Identity and Access Management (IAM) policies to restrict read and write access to the database tables
In the Shared Responsibility Model, AWS manages the security 'of' the cloud (including patching the OS, managing physical infrastructure, and database engines for managed services like DynamoDB). The customer is responsible for security 'in' the cloud, which includes managing their data, configuring client-side encryption, and defining access permissions through Identity and Access Management (IAM) policies to secure access to the tables.

Adım Adım Çözüm

1
Analyze the service model of Amazon DynamoDB.
Amazon DynamoDB is a fully managed NoSQL database service (Platform as a Service / PaaS).
Understanding the service model helps determine the boundary of shared responsibility.
2
Distinguish between customer responsibilities (security 'in' the cloud) and AWS responsibilities (security 'of' the cloud) for managed services.
AWS handles physical security, infrastructure patching, database software updates, and hardware lifecycle. The customer handles data classification, client-side encryption, and IAM permissions to access the tables.
This isolates customer tasks from AWS-managed operations.
3
Evaluate the choices to find the task that falls under customer responsibility.
Defining Identity and Access Management (IAM) policies to restrict read and write access is a customer responsibility, while patching, physical security, and manual compliance document retrieval are handled by AWS or via AWS Artifact.
To identify the correct answer matching the customer's operational obligations.

Anahtar Kavram

Shared Responsibility Model for Managed Services
Tahmini Süre:1m 0s
Bu soruyu puanla

Konular

Shared Responsibility Model

Bu konudan daha fazla soru