Examkin

Soru

Zorluk: KolayShared Responsibility Model

A company uses Amazon Route 53 to host and manage its domain name system (DNS) records. Under the AWS Shared Responsibility Model, which of the following tasks is the customer's responsibility?

  1. A
    Securing the physical data centers where the Route 53 nameservers are located
  2. B
    Applying security patches to the host operating system of the Route 53 servers
  3. Creating and configuring the DNS records inside the Route 53 hosted zonesCevap
  4. D
    Auditing the physical Route 53 infrastructure to compile compliance certifications

Cevap

Creating and configuring the DNS records inside the Route 53 hosted zones
Under the AWS Shared Responsibility Model, configuring resources, defining entries, and managing access to the services that are provisioned are customer responsibilities. Creating and configuring DNS records within Route 53 hosted zones is a configuration task managed by the customer. AWS retains responsibility for the physical servers, OS patching, and network routing of the Route 53 infrastructure.

Adım Adım Çözüm

1
Identify the service type and model boundary in the scenario.
Amazon Route 53 is a fully managed DNS service provided by AWS.
Determining if a service is managed or unmanaged helps define what the customer must configure versus what AWS maintains automatically.
2
Distinguish between infrastructure security and data/configuration management.
AWS secures the physical hardware and patching of Route 53 servers, while the customer controls DNS record definitions and hosted zone settings.
Under the Shared Responsibility Model, the customer is responsible for security 'in' the cloud (configurations, access policies, data), and AWS is responsible for security 'of' the cloud (physical security, hardware, hypervisors).

Anahtar Kavram

Shared Responsibility Model for Managed Services
Tahmini Süre:45s
Bu soruyu puanla

Konular

Shared Responsibility Model

Bu konudan daha fazla soru