Examkin

Soru

Zorluk: OrtaShared Responsibility Model

A media streaming company uses Amazon CloudFront to deliver video content to users globally. Under the AWS Shared Responsibility Model, which TWO of the following tasks are the responsibility of AWS?

  1. A
    Configuring Viewer Protocol Policies to enforce HTTPS communication between viewers and the distribution
  2. Maintaining and securing the physical infrastructure at global edge locationsCevap
  3. Patching and updating the underlying software and firmware on CloudFront edge serversCevap
  4. D
    Restricting access to sensitive media content using signed URLs or signed cookies
  5. E
    Performing physical on-site inspections of edge locations to audit compliance with industry standards

Cevap

The responsibilities of AWS are maintaining and securing the physical infrastructure at global edge locations, and patching and updating the underlying software and firmware on CloudFront edge servers.
Under the AWS Shared Responsibility Model, AWS is responsible for the security 'of' the cloud. For a managed service like Amazon CloudFront, this includes managing the physical security of the global edge locations where content is cached, and patching the software and firmware of the edge servers. Configuring distribution settings, such as forcing HTTPS (Viewer Protocol Policy) or restricting access with signed URLs, are customer responsibilities (security 'in' the cloud). Additionally, customers cannot conduct physical audits of AWS facilities; they must retrieve compliance reports via AWS Artifact.

Adım Adım Çözüm

1
Identify the service type of Amazon CloudFront.
Amazon CloudFront is a managed global content delivery network (CDN) service.
Determining the service type helps identify where the boundary lies in the Shared Responsibility Model.
2
Analyze AWS's responsibilities for a managed CDN service.
AWS is responsible for the security 'of' the cloud, which includes physical security of the edge location data centers and patching the underlying software/firmware on the edge servers.
This identifies the correct options representing AWS-managed tasks.
3
Identify and eliminate customer-side responsibilities.
Configuring viewer protocol policies (HTTPS), setting up signed URLs/cookies, and retrieving compliance reports via AWS Artifact (instead of physical data center audits) are customer responsibilities.
This helps verify that the distractors represent security 'in' the cloud tasks managed by the customer.

Anahtar Kavram

Shared Responsibility Model for Managed Services
Bu soruyu puanla

Konular

Shared Responsibility Model

Bu konudan daha fazla soru