CLF-C02 Shared Responsibility 5

Question 1

A startup uses Amazon EKS (Elastic Kubernetes Service). Under the Shared Responsibility Model, who is responsible for securing the Kubernetes control plane?

Accepted Answer

AWS manages the EKS control plane; customers manage their worker nodes and workloads

Answer

AWS manages and secures the EKS control plane, while customers are responsible for their worker nodes, pod security, and application workloads.

Question 2

Under the Shared Responsibility Model, which of the following is always the customer's responsibility regardless of which AWS service is used?

Accepted Answer

Controlling who has access to their AWS account and resources

Answer

Access management — including IAM users, roles, and policies — is always the customer's responsibility across all AWS services.

Question 3

An enterprise asks whether AWS is responsible for preventing data breaches caused by a customer's weak IAM password policy. What does the Shared Responsibility Model say?

Accepted Answer

No, configuring IAM password policies is the customer's responsibility

Answer

IAM password policies are configured by the customer, so the responsibility for enforcing strong passwords rests entirely with the customer.

Question 4

Which of the following infrastructure components is AWS responsible for under the Shared Responsibility Model?

Accepted Answer

Fiber optic cables and networking hardware connecting AWS regions

Answer

The physical network hardware and fiber connections between AWS facilities are part of the global infrastructure that AWS is fully responsible for.

Question 5

A team uses AWS Config to monitor resource configurations. Under the Shared Responsibility Model, who is responsible for setting up and interpreting AWS Config rules?

Accepted Answer

The customer is responsible for defining and managing AWS Config rules

Answer

AWS Config is a customer-configured service; customers define the rules and are responsible for evaluating and acting on compliance findings.

(CLF-C02) AWS Certified Cloud Practitioner Practice Test

(CLF-C02) AWS Certified Cloud Practitioner Practice Test

CLF-C02 Shared Responsibility 5