Exams / CLF-C02 / Shared responsibility model / Question 1
CLF-C02 practice question: Shared responsibility model (1 of 3)
Security and Compliance A free question from our original CLF-C02 practice exam. Try it, then open the answer to see why each option is right or wrong.
A company runs a web application on Amazon EC2 instances. Under the AWS shared responsibility model, which task is the company's responsibility?
Choose one answer.
- AA. Maintaining physical security at the data centres
- BB. Replacing failed disks in the host servers
- CC. Applying security patches to the guest operating system
- DD. Patching the virtualisation layer on the hosts
Show the answer and explanation
Answer: C
- A. Wrong: Physical security of the facilities is part of AWS's responsibility for security of the cloud.
- B. Wrong: The physical hardware that runs EC2 is owned and maintained by AWS.
- C. Right: Correct. With EC2 the customer manages the guest operating system, including updates and security patches.
- D. Wrong: AWS manages everything from the host operating system and virtualisation layer down to the physical facilities.
Explanation
AWS is responsible for security of the cloud: the facilities, hardware, network and virtualisation layer. The customer is responsible for security in the cloud. Because Amazon EC2 is infrastructure as a service, the customer manages the guest operating system and its patches, the software it installs, and the security group rules on each instance.
Study
Keep practising
Answer questions with a score at the end, or practise just this topic with the explanation after each one. No sign-up needed.