Examkin

Soru

Zorluk: KolayShared Responsibility Model

An educational institution uses Amazon Simple Storage Service (Amazon S3) to store student records. Under the AWS Shared Responsibility Model, which of the following are responsibilities of the customer? (Select TWO.)

  1. Configuring bucket policies to restrict access to authorized usersCevap
  2. Enabling encryption on the stored objectsCevap
  3. C
    Managing physical access to the storage hardware
  4. D
    Replacing failed hard drives in the storage arrays
  5. E
    Patching the underlying host operating systems of the S3 service

Cevap

Configuring bucket policies to restrict access and enabling encryption on the stored objects are customer responsibilities under the AWS Shared Responsibility Model.
For managed services like Amazon S3, AWS manages the infrastructure, OS patching, and physical security. The customer remains responsible for managing their data, which includes configuring bucket access policies and setting up object encryption.

Adım Adım Çözüm

1
Analyze the AWS service model for Amazon S3.
Amazon S3 is an abstract managed service. AWS maintains the underlying hardware, virtualization, and OS layers.
This helps locate the responsibility boundary for this service.
2
Determine customer responsibilities for data and access within S3.
The customer owns the data and is responsible for setting bucket access policies and managing data protection features like encryption.
This identifies the customer's operational obligations.

Anahtar Kavram

Under the AWS Shared Responsibility Model, AWS manages security 'of' the cloud (hardware, host software, physical facilities), while customers manage security 'in' the cloud (access policies, data encryption, IAM).
Tahmini Süre:1m 0s
Bu soruyu puanla

Konular

Shared Responsibility Model

Bu konudan daha fazla soru