Discuss Amazon CLF-C02 Exam Topic 2 Question 8

A company has deployed an Amazon EC2 instance.

Which option is an AWS responsibility under the AWS shared responsibility model?

AManaging and encrypting application data

BInstalling updates and security patches of guest operating system

CConfiguration of infrastructure devices

DConfiguration of security groups on each instance

Suggested Answer: C

According to the AWS shared responsibility model, AWS is responsible for protecting the infrastructure that runs all of the services offered in the AWS Cloud, such as data centers, hardware, software, networking, and facilities1.This includes the configuration of infrastructure devices, such as routers, switches, firewalls, and load balancers2.Customers are responsible for managing their data, applications, operating systems, security groups, and other aspects of their AWS environment1.Therefore, options A, B, and D are customer responsibilities, not AWS responsibilities.Reference:1: AWS Well-Architected Framework - Elasticity;2: Reactive Systems on AWS - Elastic

Get Premium CLF-C02 Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test

26 comments · newest first

Sueann 11 months ago

B is the right answer, for sure!

Fannie 11 months ago

Wait, they don’t manage OS updates? That’s wild!

Jeannetta 11 months ago

I thought AWS handled everything related to security?

Kassandra 12 months ago

Definitely not A, that's on the user.

Halina 12 months ago

AWS is responsible for the security of the cloud infrastructure.

Gregoria 12 months ago

I know that AWS takes care of the physical security and infrastructure, but I can't recall if they manage application data encryption.

Shayne 1 year ago

I feel like configuration of security groups might be something AWS handles, but I could be mixing it up with something else.

Tonette 1 year ago

I remember practicing a question about the shared responsibility model, and I think managing the OS updates is definitely on the customer side.

Truman 1 year ago

I think AWS is responsible for the underlying infrastructure, but I'm not sure if that includes security groups.

Letha 1 year ago

I'm pretty confident the answer is D. The customer is responsible for configuring the security groups on each instance, while AWS handles the underlying infrastructure.

Annelle 1 year ago

The key here is understanding the difference between AWS's responsibilities and the customer's responsibilities. I'm leaning towards C, as configuring the infrastructure devices is an AWS responsibility.

Corrie 1 year ago

Hmm, I'm not too sure about this one. I'll need to review the AWS shared responsibility model again to be confident in my answer.

Quiana 1 year ago

I think the answer is B. AWS is responsible for installing updates and security patches of the guest operating system, while the customer is responsible for managing and encrypting their application data.

Francoise 1 year ago

Easy peasy! The slice String[1:-2] removes the first and last two characters, so the resulting string is 4 chars shorter than the original. B is the answer.

Zoila 1 year ago

I'm pretty sure the answer is A. Journey Data is used for the Decision Split, so that's what I would confirm to ensure the journey is directing subscribers correctly.

Argelia 1 year ago

Aha, I think I've got it! The one Planning component that is not accessible over the web must be the "Create and Manage Database Options." That makes sense, as that would likely require direct access to the database server.

Joanne 3 years ago

Exactly! It's like Amazon is the landlord, and we're the tenants. They maintain the building, but we have to decorate our own apartments.

Cassie 3 years ago

Ah, I see. So AWS takes care of the low-level stuff, while we as customers are responsible for the higher-level configurations and application management. Makes sense.

Judy 3 years ago

You're right. I think the answer here is C) Configuration of infrastructure devices. AWS is responsible for managing the underlying hardware and network infrastructure, not the configuration of the guest operating system or the security groups.

Freeman 2 years ago

↳ replying to Judy

Definitely, it allows us to focus on other aspects of our deployment.

Rosalind 3 years ago

↳ replying to Judy

Good to know AWS has that covered for us.

Myong 3 years ago

↳ replying to Judy

Exactly, that's one less thing for us to manage.

Nathalie 3 years ago

↳ replying to Judy

So, we don't have to worry about configuring those devices ourselves.

Antonio 3 years ago

↳ replying to Judy

Yep, they handle the hardware and network infrastructure.

Latricia 3 years ago

↳ replying to Judy

I agree, AWS takes care of the infrastructure devices.

Ligia 3 years ago

Hmm, this question seems to test our understanding of the AWS shared responsibility model. From what I know, the AWS responsibilities are related to the physical infrastructure and the management of the services they provide.

Amazon CLF-C02 Exam - Topic 2 Question 8 Discussion