AWS Certified Cloud Practitioner — Question 900

Which IT controls do AWS and the customer share, according to the AWS shared responsibility model? (Choose two.)

Answer options

• A. Physical and environmental controls
• B. Patch management
• C. Cloud awareness and training
• D. Zone security
• E. Application data encryption

Correct answer: B, C

Explanation

Under the AWS Shared Responsibility Model, shared controls are those that apply to both the infrastructure layer and the customer layer. Patch management is shared because AWS patches the host infrastructure while the customer is responsible for patching their guest operating systems, and training is shared because both entities must train their own employees. Controls like physical security are solely the responsibility of AWS, while application-level encryption is solely the responsibility of the customer.