Customer Responsibility in AWS Shared Model
According to the AWS shared responsibility model, which task is the customer's responsibility?
Community Votes
100% of anonymous learners picked answer D. Votes are pick records left by other test-takers — they are not the verified answer.
Community Insight
The question tests the boundary of management responsibilities, specifically distinguishing between serverless/database managed services (AWS responsibility) and IaaS compute instances (customer responsibility).
This page clarifies the AWS shared responsibility model by identifying that customers manage guest OS updates on EC2, while AWS handles underlying infrastructure for services like Lambda and DynamoDB.
Candidates often confuse the management level of different service types, incorrectly assuming AWS manages the OS for all compute or database resources regardless of the service model.
Community Discussion (3 comments)
Comments & Corrections
No comments yet — spotted an error or have a note? Share it below.
Expert Analysis
Why the Answer Is Correct
In the AWS Shared Responsibility Model, security 'of' the cloud is AWS's responsibility, while security 'in' the cloud is the customer's. For Amazon EC2, which is an Infrastructure as a Service (IaaS) offering, the customer retains full control over the guest operating system, including applying patches and updates. Therefore, updating the guest OS is explicitly the customer's duty.Why the Other Options Are Wrong
Options A, B, and C describe managed services where AWS handles the underlying infrastructure. For AWS Lambda (serverless), AWS manages the runtime environment. For Amazon DynamoDB (managed NoSQL), AWS manages the hardware, OS, and database engine. For Amazon S3 (managed storage), AWS maintains the entire infrastructure. In these cases, the customer does not have access to or control over the underlying OS or infrastructure components.Community Comment Notes
The community consensus strongly supports option D, with multiple users confirming it as the correct answer. Comments highlight that understanding the distinction between managed services and virtual machines is key to passing this exam objective.Exam Strategy
Memorize the service models: IaaS (EC2) requires you to manage the Guest OS; PaaS/SaaS/Serverless (RDS, Lambda, DynamoDB) means AWS manages the OS and infrastructure. Always check if the service is fully managed before selecting the customer's responsibility.
Frequently Asked Questions
Does AWS manage the OS for Lambda?
Yes, AWS manages the runtime environment and underlying OS for Lambda functions, so the customer never touches the guest OS.
Is DynamoDB infrastructure AWS responsibility?
Yes, as a managed service, AWS handles all hardware, OS, and database maintenance for DynamoDB.
Related Analysis
Practice All CLF-C02 Questions
Access 120 questions with complete answers and detailed explanations.
View Full CLF-C02 Practice Test →