Examkin

Soru

Zorluk: KolayShared Responsibility Model

A company is migrating its relational database to Amazon RDS (Relational Database Service) to reduce operational overhead. Under the AWS Shared Responsibility Model, which two of the following tasks are the responsibility of the customer? (Select TWO.)

  1. Configuring database-level user access and permissionsCevap
  2. B
    Installing operating system security patches on the database server
  3. Enabling encryption at rest for the database instancesCevap
  4. D
    Replacing failed physical storage drives in the AWS data center hosting the database
  5. E
    Performing underlying virtualization hypervisor updates

Cevap

Configuring database-level user access and permissions AND Enabling encryption at rest for the database instances
Under the AWS Shared Responsibility Model for Amazon RDS, the customer is responsible for security 'in' the cloud. This includes configuring database-level user access and permissions to control access to the data, and enabling data encryption features (such as encryption at rest). AWS, on the other hand, is responsible for security 'of' the cloud, which includes managing the underlying physical infrastructure, virtualization layer, and OS-level patching.

Adım Adım Çözüm

1
Identify the AWS service and its type in the Shared Responsibility Model.
Amazon RDS is a managed service (PaaS-like database service), which offloads operating system and database engine maintenance to AWS.
Understanding the service type helps determine the boundary of responsibilities between AWS and the customer.
2
Evaluate the proposed tasks against customer-side responsibilities (security 'in' the cloud) for Amazon RDS.
Configuring database-level user permissions and enabling encryption at rest are customer responsibilities. Tasks like OS patching, hardware replacement, and hypervisor updates are handled by AWS.
To select the correct options, we must classify each task as either the customer's or AWS's responsibility.

Anahtar Kavram

Shared Responsibility Model for Managed Services (PaaS)
Tahmini Süre:1m 0s
Bu soruyu puanla

Konular

Shared Responsibility Model

Bu konudan daha fazla soru