A company is using Amazon S3 to store sensitive data. The security team wants to ensure that only authorized users can access the data. Which of the following is the customer's responsibility?

Patching the operating system of the S3 service.

Ensuring the physical security of the data centers where the data is stored.

Managing the hardware that stores the S3 data.

Configuring S3 bucket policies and IAM policies to control access.

A company is using a mix of AWS services, including EC2, S3, and Lambda. The security team is creating a responsibility matrix. Which of the following items should be listed as the responsibility of the customer?

Managing the physical infrastructure of AWS data centers.

Managing the hypervisor that runs EC2 instances.

Patching the operating system of the Lambda service.

Configuring IAM roles and policies for their AWS resources.

A company is using AWS and has a security requirement to ensure that all data is encrypted in transit and at rest. The security team is reviewing the shared responsibility model. Which of the following is the customer's responsibility?

Ensuring that the hypervisor encrypts data at rest.

Ensuring that the physical network between AWS data centers is encrypted.

Managing the encryption keys for AWS's internal network.

Enabling encryption on their S3 buckets and configuring TLS for their applications.

A company is using Amazon S3 to store sensitive customer data. The security team needs to ensure that only authorized users can access the data and that the data is encrypted at rest. According to the shared responsibility model, who is responsible for configuring the S3 bucket policies and enabling encryption?

AWS, because it manages the S3 service and its underlying infrastructure.

The customer, but only if they are using server-side encryption with AWS KMS.

Both AWS and the customer, because encryption is a shared control.

The customer, because they are responsible for the configuration of the services they use.

A company is subject to the Health Insurance Portability and Accountability Act (HIPAA) and needs to store protected health information (PHI) in AWS. They are evaluating their compliance responsibilities. According to the shared responsibility model, who is responsible for ensuring that the PHI is classified and handled according to HIPAA requirements?

The customer, but only if they are using a service that is HIPAA eligible.

AWS, because it provides the infrastructure that stores the data.

Both AWS and the customer, because compliance is a shared responsibility.

The customer, because they are responsible for data classification and governance.

AWSCertified Cloud Practitioner

Domain 2Objective 1

Task Statement 2.1: Understand the AWS Shared Responsibility Model. CLF-C02 Practice Questions (Page 1)

Part of the Security and Compliance domain, which makes up ~24% of our current practice bank. AWS does not publish an official question count, but from its 90-minute exam (~35–60 total, ~8–14 in this domain), expect 2–4 from this objective — we provide 21 practice questions to prepare you well beyond it. (estimate)

21questions here

5free pages

5concepts

Questions 1–5

1application · medium
A company is using Amazon S3 to store sensitive data. The security team wants to ensure that only authorized users can access the data. Which of the following is the customer's responsibility?
Select an answer first
2application · medium
A company is using a mix of AWS services, including EC2, S3, and Lambda. The security team is creating a responsibility matrix. Which of the following items should be listed as the responsibility of the customer?
Select an answer first
3expert · hard
A company is using AWS and has a security requirement to ensure that all data is encrypted in transit and at rest. The security team is reviewing the shared responsibility model. Which of the following is the customer's responsibility?
Select an answer first
4application · medium
A company is using Amazon S3 to store sensitive customer data. The security team needs to ensure that only authorized users can access the data and that the data is encrypted at rest. According to the shared responsibility model, who is responsible for configuring the S3 bucket policies and enabling encryption?
Select an answer first
5application · medium
A company is subject to the Health Insurance Portability and Accountability Act (HIPAA) and needs to store protected health information (PHI) in AWS. They are evaluating their compliance responsibilities. According to the shared responsibility model, who is responsible for ensuring that the PHI is classified and handled according to HIPAA requirements?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CLF-C02

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by AWS. “CLF-C02” is a trademark of its owner, used for identification only.

Task Statement 2.1: Understand the AWS Shared Responsibility Model. CLF-C02 Practice Questions (Page 1)

Questions 1–5

A company is using Amazon S3 to store sensitive data. The security team wants to ensure that only authorized users can access the data. Which of the following is the customer's responsibility?

A company is using a mix of AWS services, including EC2, S3, and Lambda. The security team is creating a responsibility matrix. Which of the following items should be listed as the responsibility of the customer?

A company is using AWS and has a security requirement to ensure that all data is encrypted in transit and at rest. The security team is reviewing the shared responsibility model. Which of the following is the customer's responsibility?

Keep studying — Security and Compliance