Examkin

Soru

Zorluk: KolayShared Responsibility Model

A retail company runs its e-commerce website on several Amazon Elastic Compute Cloud (Amazon EC2) instances. Under the AWS Shared Responsibility Model, which of the following security tasks is the sole responsibility of AWS?

  1. A
    Configuring security group rules to restrict network access to the web servers
  2. B
    Installing security patches on the web servers' guest operating systems
  3. Decommissioning and physically destroying retired storage hardwareCevap
  4. D
    Auditing and verifying that the web application code complies with industry regulations

Cevap

Decommissioning and physically destroying retired storage hardware
Decommissioning and physically destroying retired storage hardware is the correct answer because physical security, infrastructure maintenance, and hardware disposal are part of security 'of' the cloud, which is the sole responsibility of AWS.

Adım Adım Çözüm

1
Analyze the service type in the scenario
Amazon EC2 is an Infrastructure as a Service (IaaS) offering, where the customer manages the operating system, applications, and data, while AWS manages the physical infrastructure, virtualization hypervisor, and hardware.
Identifying the service type determines the boundary of responsibilities between the customer and AWS.
2
Evaluate the operational tasks against the Shared Responsibility Model
Physical hardware disposal and destruction belong to the security 'of' the cloud (managed by AWS). Configuring firewalls (security groups), patching the guest OS, and application compliance belong to security 'in' the cloud (managed by the customer).
Differentiating between security of the cloud and security in the cloud allows us to select the task owned by AWS.

Anahtar Kavram

Shared Responsibility Model
Tahmini Süre:45s
Bu soruyu puanla

Konular

Shared Responsibility Model

Bu konudan daha fazla soru