Examkin

Soru

Zorluk: KolayShared Responsibility Model

A consulting firm is storing client project documents in an Amazon Simple Storage Service (Amazon S3) bucket. Under the AWS Shared Responsibility Model, which operational task is the sole responsibility of the customer?

  1. A
    Patching the operating system of the S3 storage servers
  2. Configuring S3 bucket policies and enabling data encryptionCevap
  3. C
    Managing physical security at the data centers where S3 data is stored
  4. D
    Replacing failing physical hard drives in the storage infrastructure

Cevap

Configuring S3 bucket policies and enabling data encryption
Under the AWS Shared Responsibility Model, customers are responsible for security 'in' the cloud. For Amazon S3, this includes managing access permissions using S3 bucket policies and deciding how to encrypt the stored objects.

Adım Adım Çözüm

1
Determine the service model type for Amazon S3 in the scenario.
Amazon S3 is a managed storage service.
Determining the service type helps define the boundary between customer and AWS responsibilities.
2
Differentiate between security 'of' the cloud and security 'in' the cloud for S3.
AWS manages physical security, hardware, and server operating systems. The customer manages data access configurations, user permissions, and data encryption.
Since the customer owns the data and access configuration, configuring S3 bucket policies and enabling encryption falls under customer responsibility.

Anahtar Kavram

Shared Responsibility Model for Managed Services
Tahmini Süre:45s
Bu soruyu puanla

Konular

Shared Responsibility Model

Bu konudan daha fazla soru