Amazon CLF-C02 Exam - Topic 2 Question 29 Discussion

Actual exam question for Amazon's CLF-C02 exam

Question #: 29
Topic #: 2

[All CLF-C02 Questions]

Under the AWS shared responsibility model, which of the following is a responsibility of the customer?

AShred disk drives before they leave a data center.

BPrevent customers from gathering packets or collecting traffic at the hypervisor level.

CPatch the guest operating system with the latest security patches.

DMaintain security systems that provide physical monitoring of data centers.

Show Suggested Answer

Suggested Answer: C

Under the AWS shared responsibility model, AWS is responsible for the security 'of' the cloud, which includes the physical infrastructure, networking, and hypervisor layer. The customer, however, is responsible for security 'in' the cloud, which includes managing the security of their data, patching and maintaining their guest operating system and applications, and managing identity and access. The responsibilities of shredding disk drives, preventing packet capture at the hypervisor level, and physical monitoring are handled by AWS as part of its responsibility for security 'of' the cloud.

by Gerald at Sep 19, 2024, 03:06 AM

Limited Time Offer

25%

Off

Get Premium CLF-C02 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Shawna

3 months ago

Nope, we handle our own security patches for sure.

upvoted 0 times

...

Lettie

3 months ago

I thought physical security was AWS's job?

upvoted 0 times

...

Margurite

3 months ago

Wait, we have to shred drives too? That seems extreme.

upvoted 0 times

...

Madalyn

4 months ago

Totally agree, that's on us!

upvoted 0 times

...

Ming

4 months ago

Customers need to patch their own OS.

upvoted 0 times

...

Laurel

4 months ago

I practiced a question similar to this, and I think patching the OS is a key responsibility for customers. So C seems like the right choice to me.

upvoted 0 times

...

Lina

4 months ago

I feel like shredding disk drives is definitely something the customer would do, but I can't remember if that's part of the shared responsibility model.

upvoted 0 times

...

Ellsworth

4 months ago

I'm not entirely sure, but I remember something about physical security being more of the provider's responsibility. So maybe D isn't correct?

upvoted 0 times

...

Jerrod

5 months ago

I think the customer is responsible for patching the guest operating system, so I might go with C. That sounds familiar from our practice questions.

upvoted 0 times

...

Javier

5 months ago

I'm confident the answer is C. The shared responsibility model clearly states that the customer is responsible for managing the guest OS, including applying security patches. The other options are AWS's responsibilities.

upvoted 0 times

...

Nilsa

5 months ago

I think the answer is C. The customer is responsible for patching the guest OS, while AWS handles the underlying infrastructure. The other options seem to be more AWS's responsibility.

upvoted 0 times

...

Kayleigh

5 months ago

Okay, let me see. The question is asking about the customer's responsibilities, so it's likely one of the options that involves something the customer has to do, like managing the OS or security. I'm leaning towards C, but I'll double-check the others just to be sure.

upvoted 0 times

...

Kaitlyn

5 months ago

I'm pretty sure the answer is C - patching the guest OS is the customer's responsibility under the shared responsibility model.

upvoted 0 times

...

Rima

5 months ago

Hmm, I'm a bit unsure about this one. I know the shared responsibility model covers different areas, but I can't quite remember the specifics. I'll have to think it through carefully.

upvoted 0 times

...

Tiara

5 months ago

Hmm, I'm a bit unsure about this one. I know RADIUS is used for authentication, but I'm not too familiar with the specific attributes. I'll have to think this through carefully.

upvoted 0 times

...

Edwin

1 year ago

I think option D is also important. Maintaining security systems for physical monitoring is crucial for data center security.

upvoted 0 times

...

Judy

1 year ago

C is the way to go. Keeping the OS up-to-date is crucial for security. The other options seem more like Amazon's responsibility under the shared model. Though I have to admit, I'd love to see someone try to prevent packet gathering at the hypervisor level. That sounds like a fun challenge!

upvoted 0 times

Vicente

1 year ago

That does sound like a challenging task!

upvoted 0 times

...

Katheryn

1 year ago

B) Prevent customers from gathering packets or collecting traffic at the hypervisor level.

upvoted 0 times

...

Nakisha

1 year ago

Yeah, that one seems more like Amazon's responsibility.

upvoted 0 times

...

Pete

1 year ago

A) Shred disk drives before they leave a data center.

upvoted 0 times

...

Candida

1 year ago

That's also a crucial responsibility for the customer.

upvoted 0 times

...

Frank

1 year ago

D) Maintain security systems that provide physical monitoring of data centers.

upvoted 0 times

...

Sherita

1 year ago

I agree, keeping the OS updated is important for security.

upvoted 0 times

...

Cory

1 year ago

C) Patch the guest operating system with the latest security patches.

upvoted 0 times

...

Odelia

1 year ago

I agree with Nan. It's important to keep the operating system secure to prevent vulnerabilities.

upvoted 0 times

...

Victor

1 year ago

Hmm, I'm gonna go with C. Patching the OS is a no-brainer for the customer. The other options sound like AWS's job to me. Though I do wonder if anyone has tried to shred a drive using their bare hands. That would be a sight to see!

upvoted 0 times

Karima

1 year ago

I can't imagine trying to shred a disk drive with my bare hands, that would be a challenge!

upvoted 0 times

...

Keena

1 year ago

Yeah, I think AWS takes care of physical monitoring of data centers.

upvoted 0 times

...

Kattie

1 year ago

I agree, patching the OS is definitely the customer's responsibility.

upvoted 0 times

...

Luann

1 year ago

C) Patch the guest operating system with the latest security patches. Definitely the right answer. I can't believe anyone would think the customer is responsible for shredding drives or monitoring the data center's physical security.

upvoted 0 times