CLF-C02 Shared Responsibility 3

Question 1

A security auditor asks about responsibility for DDoS protection on AWS. Which answer is most accurate?

Accepted Answer

AWS Shield Standard automatically protects all AWS resources from common DDoS attacks at no extra cost

Answer

AWS Shield Standard is included automatically for all AWS customers and provides protection against common network and transport layer DDoS attacks.

Question 2

Under the Shared Responsibility Model, who is responsible for the availability of the AWS global infrastructure?

Accepted Answer

AWS, by maintaining its global network and data centers

Answer

AWS is responsible for the availability and reliability of its global infrastructure, including regions, Availability Zones, and edge locations.

Question 3

What does 'security IN the cloud' refer to in the AWS Shared Responsibility Model?

Accepted Answer

Customer responsibilities such as data protection, IAM, and OS patching

Answer

'Security IN the cloud' refers to customer responsibilities, including managing data, applications, identity, and operating system configuration.

Question 4

A company uses AWS Organizations with multiple accounts. Under the Shared Responsibility Model, who manages the AWS account root user credentials?

Accepted Answer

The customer is responsible for securing and restricting root user access

Answer

Customers are fully responsible for securing root user credentials, including enabling MFA and avoiding routine use of the root account.

Question 5

Which of the following is AWS responsible for under the Shared Responsibility Model?

Accepted Answer

Securing the underlying compute hypervisor

Answer

AWS is responsible for securing the hypervisor layer that supports EC2 instances, as it is part of the foundational infrastructure.

(CLF-C02) AWS Certified Cloud Practitioner Practice Test