How does the AWS shared responsibility model apply to data classification and compliance?

The customer is responsible for classifying their data and ensuring compliance with applicable regulations

Compliance is not part of the shared responsibility model

AWS and the customer share equal responsibility for data classification and compliance

AWS is responsible for classifying the customer's data and ensuring compliance with all regulations

A development team is building a new application and wants to minimize the security management overhead. They are considering using Amazon RDS for their database instead of running a database on EC2. Which of the following security tasks will AWS handle if they choose RDS, but NOT if they choose EC2?

Managing database user accounts and permissions.

Encrypting data at rest in the database.

Configuring the security group to control network access.

Patching the operating system of the database server.

A company is migrating its on-premises applications to AWS. Which security responsibility remains with the company after the migration?

Replacing failed hardware in the AWS global infrastructure

Patching the hypervisor that runs the EC2 instances

Configuring security groups and network access control lists

Managing the physical security of AWS data centers

A company is using a mix of AWS services, including EC2, RDS, and Lambda. The security team is creating a responsibility matrix. Which of the following correctly pairs the service with the responsible party for patching the operating system?

EC2: AWS, RDS: AWS, Lambda: AWS

EC2: Customer, RDS: Customer, Lambda: AWS

EC2: Customer, RDS: AWS, Lambda: AWS

EC2: AWS, RDS: Customer, Lambda: Customer

According to the AWS shared responsibility model, which security task is the customer's responsibility?

Decommissioning storage devices that contain customer data

Installing hypervisor software on AWS physical hosts

Managing the network infrastructure that connects AWS data centers

Encrypting data at rest in Amazon S3

AWSCertified Cloud Practitioner

Domain 2Objective 1

Task Statement 2.1: Understand the AWS Shared Responsibility Model. CLF-C02 Practice Questions (Page 3)

Part of the Security and Compliance domain, which makes up ~24% of our current practice bank. AWS does not publish an official question count, but from its 90-minute exam (~35–60 total, ~8–14 in this domain), expect 2–4 from this objective — we provide 21 practice questions to prepare you well beyond it. (estimate)

21questions here

5free pages

5concepts

Questions 11–15

11foundation · easy
How does the AWS shared responsibility model apply to data classification and compliance?
Select an answer first
12application · medium
A development team is building a new application and wants to minimize the security management overhead. They are considering using Amazon RDS for their database instead of running a database on EC2. Which of the following security tasks will AWS handle if they choose RDS, but NOT if they choose EC2?
Select an answer first
13foundation · easy
A company is migrating its on-premises applications to AWS. Which security responsibility remains with the company after the migration?
Select an answer first
14expert · hard
A company is using a mix of AWS services, including EC2, RDS, and Lambda. The security team is creating a responsibility matrix. Which of the following correctly pairs the service with the responsible party for patching the operating system?
Select an answer first
15foundation · easy
According to the AWS shared responsibility model, which security task is the customer's responsibility?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CLF-C02

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by AWS. “CLF-C02” is a trademark of its owner, used for identification only.