AWS Certified Cloud Practitioner — Question 421

A company is using Amazon EC2 instances.

Which tasks are the company's responsibility, according to the AWS shared responsibility model? (Choose two.)

Answer options

• A. Maintain the network infrastructure.
• B. Patch the guest operating system.
• C. Configure a security group on deployed EC2 instances.
• D. Provide physical security for the underlying hardware of the EC2 instances.
• E. Manage the underlying hypervisor.

Correct answer: B, C

Explanation

Under the AWS shared responsibility model, AWS is responsible for the security 'of' the cloud, which includes physical infrastructure, virtualization hypervisors, and physical networking. The customer is responsible for security 'in' the cloud, meaning they must manage the guest operating system patching and configure resource-level firewalls like security groups.