Which of the following is the responsibility of the customer? Choose 2 answers from the options given below

Question

Options

• AManagement of the Edge locations
• BEncryption of data at rest
• CProtection of data in transit
• DDecommissioning of old storage devices

• A
  3% (1)
• B
  90% (27)
• D
  7% (2)

Explanation

AWS Shared Responsibility Model

This question tests the AWS Shared Responsibility Model, which divides security duties between AWS and the customer.

B (Encryption of data at rest) and C (Protection of data in transit) are correct because customers own their data and are solely responsible for how it is secured - whether stored on disk or moving across a network. AWS provides the tools (KMS, SSL endpoints, etc.), but the customer decides whether and how to use them.

A is wrong - Edge locations are physical AWS infrastructure (CloudFront PoPs). AWS is responsible for managing, securing, and operating all physical facilities and network infrastructure.

D is wrong - When storage devices reach end-of-life in AWS data centers, AWS handles the physical decommissioning and destruction process; customers never touch the hardware.

Memory tip: Use the phrase "AWS secures the cloud; you secure what's in the cloud." Anything involving physical hardware (Edge locations, old drives) = AWS. Anything involving your own data's confidentiality (encryption at rest, encryption in transit) = you.

No community discussion yet for this question.