ExamPark
Course menuCLF-C02

Exams / CLF-C02 / Shared responsibility model / Question 3

CLF-C02 practice question: Shared responsibility model (3 of 3)

Security and Compliance A free question from our original CLF-C02 practice exam. Try it, then open the answer to see why each option is right or wrong.

Last verified against current AWS documentation ·How we write our questions

A compliance lead is documenting who is responsible for each control in a new AWS workload.

AWS documentation describes shared controls, where AWS and the customer each have a part to play in their own layer.

Which TWO of the following are shared controls? (Choose two.)

Choose two answers.

  1. A. Physical and environmental controls at AWS data centers, such as power and cooling
  2. B. Patch management, covering AWS infrastructure and customer guest operating systems
  3. C. Routing or zoning data within specific security environments for a workload
  4. D. Awareness and training, where AWS trains its staff and customers train theirs
  5. E. Choosing the encryption options for data stored in Amazon S3 buckets
Show the answer and explanation

Answers: B, D

  • A. Wrong: Physical and environmental controls are inherited from AWS. AWS runs the facilities, power and cooling, and the customer does not share that control.
  • B. Right: Correct. AWS patches its own infrastructure and customers patch their guest operating systems and applications, so patch management is a shared control. Learn more: AWS Shared Responsibility Model (opens in a new tab)
  • C. Wrong: Routing or zoning data within a security environment is a customer-specific control, because it depends on how the customer designs its own application and network.
  • D. Right: Correct. AWS trains its own employees and customers train theirs, so awareness and training is a shared control that each party carries out in its own layer.
  • E. Wrong: Choosing encryption options for data stored in S3 is the customer's responsibility. This is a customer-only control rather than a shared one.

Explanation

Shared controls are split by layer. AWS patches and configures its own infrastructure while customers do the same for their guest systems, and both sides train their own staff. Physical controls are inherited entirely from AWS, while zoning within a workload and encryption choices are the customer's alone.

Study

Keep practicing

Answer questions with a score at the end, or practice just this topic with the explanation after each one. No sign-up needed.

Take the free CLF-C02 practice examPractice Shared responsibility modelAll Shared responsibility model questions

Want more on Shared responsibility model? The 5 full-length practice sets have 12 more Shared responsibility model questions, 325 in all, none of them in the free exam. One payment of $14.99, no subscription. See the practice sets