Examkin

Soru

Zorluk: OrtaShared Responsibility Model

A software development firm is deploying its microservices-based application using Amazon Elastic Container Service (Amazon ECS) with the AWS Fargate launch type. Under the AWS Shared Responsibility Model, which of the following tasks is the responsibility of the customer?

  1. Configuring security groups to control network traffic allowed to reach the containersCevap
  2. B
    Patching the underlying host operating system and hypervisor hosting the container tasks
  3. C
    Configuring stateless Network Access Control Lists (NACLs) directly inside the container runtime environment
  4. D
    Retrieving physical data center security compliance reports directly from the Fargate host systems

Cevap

Configuring security groups to control network traffic allowed to reach the containers
Under the AWS Shared Responsibility Model, the customer is responsible for 'security in the cloud.' When using AWS Fargate, AWS handles the host operating system, hypervisor, and physical security. The customer maintains control over, and responsibility for, configuring the security groups to manage inbound and outbound network traffic to their container tasks.

Adım Adım Çözüm

1
Identify the service deployment model used in the scenario.
The application runs on Amazon ECS using the AWS Fargate launch type, which is a serverless/managed container environment.
Determining the service type helps define the boundary lines of the Shared Responsibility Model, separating customer tasks from AWS infrastructure tasks.
2
Evaluate the operational tasks against customer and AWS boundaries.
Configuring security groups to filter container traffic is a customer task, while host patching, physical security, and direct host compliance access are managed by AWS.
Under the Shared Responsibility Model, customers are responsible for managing access configurations (security in the cloud) such as security groups for container tasks.

Anahtar Kavram

Shared Responsibility Model
Bu soruyu puanla

Konular

Shared Responsibility Model

Bu konudan daha fazla soru