According to the AWS shared responsibility model, which of the following are AWS responsibilities? (Choose two.)

Question

Options

• ANetwork infrastructure and virtualization of infrastructure
• BSecurity of application data
• CGuest operating systems
• DPhysical security of hardware
• ECredentials and policies

• A
  92% (54)
• B
  2% (1)
• C
  2% (1)
• E
  5% (3)

Explanation

AWS Shared Responsibility Model

AWS is responsible for security "of" the cloud - meaning the underlying infrastructure that runs all AWS services. Option A (Network infrastructure and virtualization) is correct because AWS owns and manages the physical networking, data centers, and hypervisor layers that customers never directly access. Option D (Physical security of hardware) is correct because AWS controls who enters its data centers and how physical servers are protected - customers have no ability to influence this.

The distractors represent customer responsibilities: Option B (Application data security) is the customer's job since they control what data they store and how it's encrypted. Option C (Guest operating systems) falls on the customer for IaaS services like EC2, where you manage patching and configuration. Option E (Credentials and policies) is a customer responsibility through IAM - AWS provides the IAM service, but customers manage their own users, roles, and permissions.

Memory Tip: Think of AWS as a landlord - they secure the building (physical security, infrastructure), but you're responsible for what happens inside your apartment (OS, data, credentials). If you can touch or configure it yourself, it's probably your responsibility.

No community discussion yet for this question.