Practice Test Geeks(CLF-C02) AWS Certified Cloud Practitioner Practice Test
← All CLF-C02 Flashcard Decks

Shared Responsibility Flashcards

7 cards from real CLF-C02 practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.

Read the first 7 Shared Responsibility flashcards as text

  1. A company stores sensitive customer data in Amazon S3. According to the AWS Shared Responsibility Model, who is responsible for encrypting the data at rest?

    Answer: The customer is responsible for enabling and managing encryption

    Customers are responsible for protecting their data in S3, including choosing to enable server-side or client-side encryption.

  2. Which of the following is an example of AWS's responsibility under the Shared Responsibility Model?

    Answer: Maintaining the physical security of data center facilities

    AWS is responsible for physical security of its data centers, including facility access controls and environmental safeguards.

  3. When using AWS Lambda, which security task is the customer responsible for?

    Answer: Writing secure function code and managing function permissions

    With Lambda, customers own the function code and must ensure it is secure and that IAM permissions are properly scoped.

  4. Under the Shared Responsibility Model, which layer does AWS manage for Amazon RDS?

    Answer: Database engine patching and updates

    AWS manages the underlying database engine patching for RDS, which is one of the benefits of using a managed service.

  5. A developer wants to understand who is responsible for network traffic protection in AWS. Which statement is accurate?

    Answer: The customer configures security groups and NACLs; AWS protects the physical network

    AWS protects the underlying physical network infrastructure, while customers configure virtual network controls like security groups and NACLs.

  6. Which scenario best illustrates a customer's responsibility in the Shared Responsibility Model?

    Answer: Rotating IAM access keys regularly

    Rotating IAM access keys is a customer security best practice that falls entirely under the customer's responsibility.

  7. How does the Shared Responsibility Model change when a customer moves from EC2 to AWS Fargate?

    Answer: AWS takes on more responsibility as it manages the container infrastructure

    With Fargate, AWS manages the underlying container infrastructure and OS, reducing the customer's operational responsibilities compared to EC2.