Exams / CLF-C02 / Shared responsibility model / Question 3
CLF-C02 practice question: Shared responsibility model (3 of 3)
Security and Compliance A free question from our original CLF-C02 practice exam. Try it, then open the answer to see why each option is right or wrong.
AWS describes some controls as 'shared controls', where AWS and the customer each have a part to play in their own layer. Which TWO of the following are shared controls? (Choose two.)
Choose two answers.
- AA. Physical and environmental controls at data centres
- BB. Patch management
- CC. Routing or zoning data within specific security environments
- DD. Awareness and training
- EE. Secure disposal of the hard drives in AWS data centres
Show the answer and explanation
Answers: B, D
- A. Wrong: These are inherited controls: the customer relies entirely on AWS's controls and has nothing to implement.
- B. Right: Correct. AWS patches and fixes flaws in the infrastructure, and the customer patches its guest operating systems and applications.
- C. Wrong: AWS gives this, 'service and communications protection or zone security', as an example of a customer-specific control.
- D. Right: Correct. AWS trains its own employees, and the customer must train its own employees.
- E. Wrong: Disposal of AWS hardware is handled entirely by AWS as part of security of the cloud.
Explanation
The shared responsibility model includes three kinds of control. Inherited controls (such as physical and environmental controls) are fully provided by AWS. Shared controls apply to both parties in their own layer: patch management, configuration management, and awareness and training. Customer-specific controls, such as zone security, depend only on the customer's application.
Study
Keep practising
Answer questions with a score at the end, or practise just this topic with the explanation after each one. No sign-up needed.