CLF-C02 Shared Responsibility 2

Question 1

A company stores sensitive customer data in Amazon S3. According to the AWS Shared Responsibility Model, who is responsible for encrypting the data at rest?

Accepted Answer

The customer is responsible for enabling and managing encryption

Answer

Customers are responsible for protecting their data in S3, including choosing to enable server-side or client-side encryption.

Question 2

Which of the following is an example of AWS's responsibility under the Shared Responsibility Model?

Accepted Answer

Maintaining the physical security of data center facilities

Answer

AWS is responsible for physical security of its data centers, including facility access controls and environmental safeguards.

Question 3

When using AWS Lambda, which security task is the customer responsible for?

Accepted Answer

Writing secure function code and managing function permissions

Answer

With Lambda, customers own the function code and must ensure it is secure and that IAM permissions are properly scoped.

Question 4

Under the Shared Responsibility Model, which layer does AWS manage for Amazon RDS?

Accepted Answer

Database engine patching and updates

Answer

AWS manages the underlying database engine patching for RDS, which is one of the benefits of using a managed service.

Question 5

A developer wants to understand who is responsible for network traffic protection in AWS. Which statement is accurate?

Accepted Answer

The customer configures security groups and NACLs; AWS protects the physical network

Answer

AWS protects the underlying physical network infrastructure, while customers configure virtual network controls like security groups and NACLs.

(CLF-C02) AWS Certified Cloud Practitioner Practice Test

(CLF-C02) AWS Certified Cloud Practitioner Practice Test

CLF-C02 Shared Responsibility 2