AWS Shared Responsibility Model: AWS vs Customer Tasks
Which tasks are the responsibility of AWS according to the AWS shared responsibility model? (Choose two.)
Community Votes
100% of anonymous learners picked answer CE. Votes are pick records left by other test-takers — they are not the verified answer.
Community Insight
The core concept is that AWS manages the 'security of' the cloud (physical, hardware, network), while the customer manages 'security in' the cloud (data, OS, applications). A common trap is confusing application patching with infrastructure patching.
This question tests the AWS shared responsibility model by distinguishing between security OF the cloud (AWS) and security IN the cloud (customer). The correct answers are C and E, representing AWS's duties to secure physical infrastructure and underlying components.
Learners often select D (Patch applications) thinking it falls under management, but patching guest OS and applications is a customer responsibility. They might also pick A or B, which are configuration tasks performed by the user.
Community Discussion (3 comments)
Comments & Corrections
No comments yet — spotted an error or have a note? Share it below.
Expert Analysis
Why the Answer Is Correct
According to the AWS shared responsibility model, AWS is responsible for the security of the cloud. This includes securing the global infrastructure, which encompasses physical facilities (Option C) and the underlying software and hardware layers (Option E). Therefore, securing physical access and performing infrastructure patching are strictly AWS duties.Why the Other Options Are Wrong
Options A, B, and D represent responsibilities within the cloud, which fall to the customer. Configuring IAM (A) and security groups (B) are identity and network controls managed by the user. Patching applications (D) running on EC2 is a guest-level task; while AWS patches the host, the customer must manage the OS and software inside the instance.Community Comment Notes
The community consensus is unanimous, with all voters selecting CE. As ShaiTay noted, "C & E are AWS responsibilities," highlighting the clear distinction between physical security and infrastructure maintenance as AWS-managed domains.Exam Strategy
Always remember the phrase 'Security OF the Cloud' vs 'Security IN the Cloud'. If the option refers to physical buildings, cables, or the hypervisor/host OS, it is AWS. If it refers to data, permissions, guest OS, or apps, it is the customer.
Frequently Asked Questions
Does AWS patch the EC2 operating system?
No. For Amazon EC2, the customer is responsible for patching the guest operating system and applications. AWS only patches the underlying host infrastructure.
Who configures Security Groups?
The customer. Security Groups are virtual firewalls attached to instances, and their rules must be defined and managed by the user.
Related Analysis
Practice All CLF-C02 Questions
Access 120 questions with complete answers and detailed explanations.
View Full CLF-C02 Practice Test →