AWS Certified Cloud Practitioner (CLF-C02) — Question 530

A company uses Amazon WorkSpaces.

Which task is the responsibility of AWS, according to the AWS shared responsibility model?

Answer options

• A. Set up multi-factor authentication (MFA) for each WorkSpaces user account.
• B. Ensure the environmental safety and security of the AWS infrastructure that hosts WorkSpaces.
• C. Provide security for WorkSpaces user accounts through AWS Identity and Access Management (IAM).
• D. Configure AWS CloudTrail to log API calls and user activity.

Correct answer: B

Explanation

Under the AWS shared responsibility model, AWS is responsible for the security 'of' the cloud, which includes the physical infrastructure, environmental safety, and hardware hosting services like Amazon WorkSpaces. On the other hand, customers are responsible for security 'in' the cloud, which encompasses tasks such as configuring MFA, managing user accounts via IAM, and setting up logging tools like AWS CloudTrail.