Examkin

Soru

Zorluk: OrtaShared Responsibility Model

A financial technology company is using Amazon Cognito user pools to manage customer authentication and authorization for its mobile banking application. Under the AWS Shared Responsibility Model, which of the following is a responsibility of the customer?

  1. A
    Patching the underlying operating systems and host infrastructure running Amazon Cognito.
  2. Configuring password complexity requirements and multi-factor authentication (MFA) settings for the user pool.Cevap
  3. C
    Managing the physical security of the data centers where user pool directory data is stored.
  4. D
    Upgrading the core identity federation software and security compliance patches for the Cognito service engine.

Cevap

Configuring password complexity requirements and multi-factor authentication (MFA) settings for the user pool.
Under the AWS Shared Responsibility Model, the customer is responsible for 'security in the cloud.' For Amazon Cognito user pools, this responsibility entails setting password complexity policies, configuring multi-factor authentication (MFA) protocols, and managing client-side authorization parameters.

Adım Adım Çözüm

1
Determine the service type and the division of operational duties.
Amazon Cognito is classified as a managed platform-as-a-service (PaaS) or software-as-a-service (SaaS) utility, where AWS handles the underlying infrastructure, operating system, and database tiers.
Correct classification of the AWS service is essential to identifying the boundaries of the Shared Responsibility Model.
2
Differentiate between security 'of' the cloud and security 'in' the cloud for the identified service type.
The customer's responsibility focuses on data and configuration options (security 'in' the cloud), such as setting custom password standards and configuring MFA rules. AWS's responsibility focuses on infrastructure and platform software integrity (security 'of' the cloud).
Distinguishing configuration and data access settings from infrastructure maintenance identifies who is responsible for the task.

Anahtar Kavram

Shared Responsibility Model for Managed Services
Tahmini Süre:1m 0s
Bu soruyu puanla

Konular

Shared Responsibility Model

Bu konudan daha fazla soru