Task Statement 2.1: Understand the AWS Shared Responsibility Model. CLF-C02 Practice Questions (Page 2)

Questions 6–10

1. 6application · medium

   A company is planning to migrate its applications to AWS. The security team is creating a responsibility matrix to ensure all security aspects are covered. Which of the following items should be listed as the responsibility of AWS?

   • APatching the operating system of an EC2 instance.
   • BEncrypting data stored in S3 buckets.
   • CManaging the physical security of AWS data centers.
   • DConfiguring security groups for EC2 instances.
   Reveal Solution Discussion Select an answer first
2. 7foundation · easy

   A company runs a containerized application on Amazon ECS with AWS Fargate. Which security responsibility does the customer retain?

   • AManaging the container images and their security
   • BSecuring the physical servers that host the Fargate tasks
   • CUpdating the Fargate platform version
   • DPatching the host operating system that runs the containers
   Reveal Solution Discussion Select an answer first
4. 8foundation · easy

   A company must comply with the General Data Protection Regulation (GDPR) for its AWS-hosted application. What is the customer's responsibility regarding GDPR compliance?

   • AAWS automatically makes the application GDPR-compliant because it runs on AWS
   • BThe customer must ensure their use of AWS services meets GDPR requirements, such as data processing and storage locations
   • CGDPR compliance is solely the responsibility of AWS because it operates the cloud infrastructure
   • DThe customer is not responsible for GDPR because AWS is the data processor
   Reveal Solution Discussion Select an answer first
5. 9foundation · easy

   Which of the following is an AWS responsibility under the shared responsibility model?

   • APatching the guest operating system of an EC2 instance
   • BSetting up multi-factor authentication (MFA) for IAM users
   • CManaging Amazon S3 bucket policies
   • DProtecting the physical data centers that host AWS services
   Reveal Solution Discussion Select an answer first
6. 10application · medium

   A company is using Amazon EC2 for a critical application. The security team is reviewing the shared responsibility model to ensure all security aspects are covered. Which of the following is the responsibility of AWS?

   • AManaging the physical host and hypervisor that run the EC2 instance.
   • BPatching the guest operating system of the EC2 instance.
   • CConfiguring the security group to control traffic to the instance.
   • DManaging the IAM roles and permissions for the EC2 instance.
   Reveal Solution Discussion Select an answer first