Examkin

Soru

Zorluk: KolayAWS Marketplace

A company's security team deploys a third-party firewall purchased from AWS Marketplace as an Amazon Machine Image (AMI) onto an Amazon EC2 instance. Under the AWS Shared Responsibility Model, who is responsible for applying software updates and security patches to this firewall?

  1. The customer, who maintains full control and responsibility for configuring and patching software deployed on their Amazon EC2 instances.Cevap
  2. B
    AWS, because any software purchased through the AWS Marketplace catalog is automatically managed and patched by AWS security teams.
  3. C
    The third-party vendor, who gains administrative access to the customer's EC2 instance to perform routine security maintenance.
  4. D
    AWS, because purchasing the firewall through AWS Marketplace converts the customer's software maintenance operational expenses (OpEx) into a capital expense (CapEx) managed by AWS.

Cevap

The customer is responsible for applying software updates and security patches, as they maintain control of the software deployed on their EC2 instances.
The customer is responsible because deploying an AMI on Amazon EC2 means the software runs within the customer's boundary of the Shared Responsibility Model. The customer must configure and patch the operating system and applications they choose to run.

Adım Adım Çözüm

1
Analyze the deployment model of the third-party software.
The firewall is deployed as an Amazon Machine Image (AMI) on an Amazon EC2 instance.
Understanding where the software runs helps determine the boundary of the Shared Responsibility Model.
2
Apply the AWS Shared Responsibility Model to the EC2 deployment.
AWS is responsible for the security of the cloud (underlying hardware, hypervisor, physical security), whereas the customer is responsible for security in the cloud (operating systems, network configuration, and application patching).
This establishes that customer-managed EC2 instances fall under the customer's operational responsibility.
3
Determine if purchasing through AWS Marketplace alters this responsibility.
AWS Marketplace simplifies licensing and billing, but does not transfer administrative or patching duties of EC2-hosted applications to AWS or the vendor.
Purchasing software from a catalog does not change the core responsibility of running and securing it on your instances.

Anahtar Kavram

AWS Shared Responsibility Model applied to AWS Marketplace AMI deployments
Bu soruyu puanla

Konular

AWS Marketplace

Bu konudan daha fazla soru