Examkin

Soru

Zorluk: OrtaShared Responsibility Model

A company is using Amazon ElastiCache (Redis OSS) to cache session data for a high-traffic web application. Under the AWS Shared Responsibility Model, which of the following are responsibilities of the customer? (Select TWO.)

  1. Configuring security groups to restrict network access to the cache nodesCevap
  2. Enabling and managing encryption in transit and Redis authentication for client accessCevap
  3. C
    Patching the guest operating system of the instances hosting the cache engine
  4. D
    Replacing failed physical memory modules in the physical servers hosting the database cache
  5. E
    Performing physical security audits of the AWS data centers where the cache data is stored

Cevap

Configuring security groups to restrict network access to the cache nodes, and enabling and managing encryption in transit and Redis authentication for client access.
For managed services like Amazon ElastiCache, AWS manages the underlying virtual machines, OS patching, and physical infrastructure. The customer is responsible for configuring access controls, such as security groups, and managing authentication and encryption options to secure data within the cache.

Adım Adım Çözüm

1
Identify the AWS service type in the scenario.
Amazon ElastiCache is a managed service (Platform as a Service/PaaS model).
The division of responsibilities depends on whether a service is Infrastructure as a Service (IaaS) or a managed service (PaaS).
2
Differentiate customer responsibilities from AWS responsibilities for managed services.
AWS handles underlying infrastructure, including physical security, hardware replacement, hypervisor management, and operating system patching. The customer handles configuration, data encryption settings, user authentication, and network access controls (security groups).
This alignment helps identify which tasks fall under customer ownership ('security in the cloud') vs AWS ownership ('security of the cloud').

Anahtar Kavram

Shared Responsibility Model for Managed Services
Bu soruyu puanla

Konular

Shared Responsibility Model

Bu konudan daha fazla soru