Examkin

Soru

Zorluk: KolayShared Responsibility Model

A logistics company uses Amazon Simple Queue Service (SQS) to decouple its order processing systems. Under the AWS Shared Responsibility Model, which two of the following tasks are the responsibility of the customer?

  1. Configuring IAM policies to restrict access to the queueCevap
  2. Enabling server-side encryption (SSE) on the queue using encryption keysCevap
  3. C
    Upgrading and patching the operating systems of the servers running the SQS service
  4. D
    Managing the physical security and disposal of storage disks hosting the message queues
  5. E
    Replicating queue data across physical disks to prevent hardware-level data loss

Cevap

Configuring IAM policies to restrict access to the queue, and enabling server-side encryption (SSE) on the queue using encryption keys.
For fully managed services like Amazon SQS, the customer is responsible for security 'in' the cloud, which includes configuring IAM policies to restrict queue access and enabling server-side encryption to protect data. AWS is responsible for security 'of' the cloud, including the underlying infrastructure, operating systems, and physical security.

Adım Adım Çözüm

1
Identify the AWS service model type for Amazon SQS.
Amazon SQS is a fully managed service, meaning AWS handles all underlying infrastructure, servers, physical hardware, and operating systems.
Understanding the service type helps determine where the boundary of responsibility lies.
2
Determine customer responsibilities (security 'in' the cloud) for SQS.
The customer is responsible for data classification, encryption settings, and configuring identity and access management (IAM) policies to secure access to the queue.
Customer responsibilities for managed services focus on data protection and access configuration.
3
Identify AWS responsibilities (security 'of' the cloud) for SQS and eliminate matching options.
AWS handles OS patching, physical storage decommissioning, and infrastructure replication. Options describing these tasks are eliminated.
Infrastructure, physical security, and foundational service operations belong to AWS.

Anahtar Kavram

Under the AWS Shared Responsibility Model, for managed services like SQS, AWS manages the infrastructure layer (such as operating system updates, hardware maintenance, and physical security), while the customer remains responsible for data configuration, encryption settings, and access control policies.
Bu soruyu puanla

Konular

Shared Responsibility Model

Bu konudan daha fazla soru