Examkin

Soru

Zorluk: OrtaShared Responsibility Model

A biotechnology startup uses Amazon DynamoDB to store and query gene sequencing metadata. To comply with industry security regulations, the startup must implement strict access control and verify compliance of the cloud environment. Under the AWS Shared Responsibility Model, which of the following is a responsibility of the customer?

  1. Managing the identity and access management (IAM) policies that regulate access to the database tablesCevap
  2. B
    Patching the underlying operating system and database engine of the hosting servers
  3. C
    Attaching a stateful security group directly to the DynamoDB tables to restrict network access
  4. D
    Scheduling a physical audit of the AWS data centers where the database is hosted to verify compliance

Cevap

Managing the identity and access management (IAM) policies that regulate access to the database tables
For managed services like Amazon DynamoDB, AWS handles infrastructure, hardware, and operating system management. The customer remains responsible for data access controls, which is achieved by defining and managing identity and access management (IAM) policies.

Adım Adım Çözüm

1
Analyze the service type in the scenario.
Amazon DynamoDB is classified as a managed platform-as-a-service (PaaS) database service.
Determining the service type helps define where the boundary lies between AWS and customer responsibilities.
2
Evaluate customer versus AWS responsibilities for Amazon DynamoDB.
AWS is responsible for physical security, infrastructure, operating system patching, and database engine maintenance. The customer is responsible for data classification, encryption settings, and identity and access management (IAM) policies.
This isolates the task that belongs to the customer under the Shared Responsibility Model.

Anahtar Kavram

Under the AWS Shared Responsibility Model, security of the database platform and infrastructure is the responsibility of AWS, while configuring data access controls (such as IAM policies) remains the responsibility of the customer.
Tahmini Süre:1m 30s
Bu soruyu puanla

Konular

Shared Responsibility Model

Bu konudan daha fazla soru