ExamPark
Course menuCLF-C02

Exams / CLF-C02 / Shared responsibility model / Question 1

CLF-C02 practice question: Shared responsibility model (1 of 3)

Security and Compliance A free question from our original CLF-C02 practice exam. Try it, then open the answer to see why each option is right or wrong.

Last verified against current AWS documentation ·How we write our questions

A company runs its web application on Amazon EC2 instances inside a virtual private cloud.

Its security team asks which tasks it must perform itself under the AWS shared responsibility model, and which AWS handles on its behalf.

Which task is the company's responsibility?

Choose one answer.

  1. A. Maintaining physical security at the AWS data centers and facilities
  2. B. Replacing failed disks in the physical host servers that AWS runs
  3. C. Configuring the security group rules that control traffic to each instance
  4. D. Patching the virtualization layer on the physical hosts that AWS runs
Show the answer and explanation

Answer: C

  • A. Wrong: Incorrect. Physical security of AWS data centers is part of the AWS infrastructure, which AWS protects. The company does not manage access to the facilities.
  • B. Wrong: Incorrect. Replacing failed hardware in AWS host servers is an AWS infrastructure task. Customers never see or manage those physical disks.
  • C. Right: Correct. For EC2, the customer configures the AWS-provided firewall, called a security group, on each instance. Deciding which traffic may reach the instances is the company's task. Learn more: Shared responsibility: Security Pillar (opens in a new tab)
  • D. Wrong: Incorrect. AWS patches the virtualization layer and host systems as part of the infrastructure it runs, so customers do not patch that layer.

Explanation

AWS is responsible for the infrastructure: facilities, hardware, networking and the virtualization layer. For EC2, customers are responsible for what they configure on and run inside each instance, including the security group rules that control which traffic reaches it.

Study

Keep practicing

Answer questions with a score at the end, or practice just this topic with the explanation after each one. No sign-up needed.

Take the free CLF-C02 practice examPractice Shared responsibility modelAll Shared responsibility model questions

Want more on Shared responsibility model? The 5 full-length practice sets have 12 more Shared responsibility model questions, 325 in all, none of them in the free exam. One payment of $14.99, no subscription. See the practice sets