AWS Certified Cloud Practitioner — Question 728

Which tasks are the responsibility of the customer, according to the AWS shared responsibility model? (Choose two.)

Answer options

• A. Patch the Amazon RDS operating system.
• B. Upgrade the firmware of the network infrastructure.
• C. Manage data encryption.
• D. Maintain physical access control in an AWS Region.
• E. Grant least privilege access to IAM users.

Correct answer: C, E

Explanation

According to the AWS shared responsibility model, AWS is responsible for security 'of' the cloud, which includes physical data center access, infrastructure maintenance, and managed service OS patching like Amazon RDS. The customer is responsible for security 'in' the cloud, meaning they must manage data encryption and configure IAM users with least privilege access.