Exams / CLF-C02 / Shared responsibility model / Question 2
CLF-C02 practice question: Shared responsibility model (2 of 3)
Security and Compliance A free question from our original CLF-C02 practice exam. Try it, then open the answer to see why each option is right or wrong.
A company stores customer documents in Amazon S3. Under the shared responsibility model, which task belongs to the company rather than to AWS?
Choose one answer.
- AA. Controlling access to the bucket and objects with IAM and bucket policies
- BB. Patching the operating systems of the servers that run Amazon S3
- CC. Replacing failed storage devices that hold the S3 data
- DD. Running the facilities and networks that host the S3 service
Show the answer and explanation
Answer: A
- A. Right: Correct. For abstracted services such as S3, customers remain responsible for their data, access permissions and encryption choices.
- B. Wrong: For abstracted services, AWS operates the infrastructure layer, the operating system and the platform.
- C. Wrong: Storage hardware is part of the infrastructure that AWS owns and maintains.
- D. Wrong: The facilities and networks behind S3 are AWS's responsibility for security of the cloud.
Explanation
How much the customer manages depends on the service. For abstracted services such as Amazon S3 and Amazon DynamoDB, AWS runs the infrastructure, operating system and platform. Customers still manage their data, classify it, decide how it is encrypted and control access with IAM permissions and bucket policies. Most S3 data exposures come from customer-side access settings.
Study
Keep practising
Answer questions with a score at the end, or practise just this topic with the explanation after each one. No sign-up needed.