Exam AWS Certified Cloud Practitioner CLF-C02 topic 1 question 130 discussion

Shared Controls "AWS is responsible for patching and fixing flaws within the infrastructure, but customers are responsible for patching their guest OS and applications." Reference: https://aws.amazon.com/compliance/shared-responsibility-model/

A. Configuration of Amazon EC2 instance operating systems This is customer responsibility because you manage and configure the OS on your EC2 instances. B. Application file system server-side encryption This is generally customer responsibility, as customers configure encryption for their data and applications. C. Patch management This is shared responsibility: AWS patches the underlying infrastructure and managed services. Customers are responsible for patching the guest OS and applications running on EC2 or other IaaS. D. Security of the physical infrastructure This is AWS responsibility — AWS manages data centers, physical hardware, and network infrastructure.

Under the AWS shared responsibility model, patch management is a shared responsibility. AWS is responsible for patching the infrastructure and services they manage, while customers are responsible for patching the operating systems and applications running on their Amazon EC2 instances and other resources.

Shared Controls. Examples include: 1. Patch Management 2. Configuration Management 3. Awareness and Training

Shared Controls. Examples include: 1. Patch Management 2. Configuration Management 3. Awareness and Training https://docs.aws.amazon.com/wellarchitected/latest/security-pillar/shared-responsibility.html

Patch Management – AWS is responsible for patching and fixing flaws within the infrastructure, but customers are responsible for patching their guest OS and applications. Configuration Management – AWS maintains the configuration of its infrastructure devices, but a customer is responsible for configuring their own guest operating systems, databases, and applications. Awareness & Training - AWS trains AWS employees, but a customer must train their own employees. https://aws.amazon.com/compliance/shared-responsibility-model/

Patch Management – AWS is responsible for patching and fixing flaws within the infrastructure, but customers are responsible for patching their guest OS and applications. https://aws.amazon.com/compliance/shared-responsibility-model/

C is correct