CLF-C02 Question 130

Community Discussion

Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.

• Chose C1

  A. Configuration of Amazon EC2 instance operating systems This is customer responsibility because you manage and configure the OS on your EC2 instances. B. Application file system server-side encryption This is generally customer responsibility, as customers configure encryption for their data and applications. C. Patch management This is shared responsibility: AWS patches the underlying infrastructure and managed services. Customers are responsible for patching the guest OS and applications running on EC2 or other IaaS. D. Security of the physical infrastructure This is AWS responsibility — AWS manages data centers, physical hardware, and network infrastructure.

• Chose C2

  Under the AWS shared responsibility model, patch management is a shared responsibility. AWS is responsible for patching the infrastructure and services they manage, while customers are responsible for patching the operating systems and applications running on their Amazon EC2 instances and other resources.

• Chose C1

  Shared Controls. Examples include: 1. Patch Management 2. Configuration Management 3. Awareness and Training