AWS Shared Responsibility Model: AWS vs Customer Tasks
Short answer
CE Secure the access of physical AWS facilities and perform infrastructure patching and maintenance are the responsibilities of AWS under the shared responsibility model.
Question
Key Takeaways
The core concept is that AWS manages the 'security of' the cloud (physical, hardware, network), while the customer manages 'security in' the cloud (data, OS, applications). A common trap is confusing application patching with infrastructure patching.
This question tests the AWS shared responsibility model by distinguishing between security OF the cloud (AWS) and security IN the cloud (customer). The correct answers are C and E, representing AWS's duties to secure physical infrastructure and underlying components.
Common mistake: Learners often select D (Patch applications) thinking it falls under management, but patching guest OS and applications is a customer responsibility. They might also pick A or B, which are configuration tasks performed by the user.
Expert Analysis
Why the Answer Is Correct
According to the AWS shared responsibility model, AWS is responsible for the security of the cloud. This includes securing the global infrastructure, which encompasses physical facilities (Option C) and the underlying software and hardware layers (Option E). Therefore, securing physical access and performing infrastructure patching are strictly AWS duties.
Why the Other Options Are Wrong
Options A, B, and D represent responsibilities within the cloud, which fall to the customer. Configuring IAM (A) and security groups (B) are identity and network controls managed by the user. Patching applications (D) running on EC2 is a guest-level task; while AWS patches the host, the customer must manage the OS and software inside the instance.
Community Comment Notes
The community consensus is unanimous, with all voters selecting CE. As ShaiTay noted, "C & E are AWS responsibilities," highlighting the clear distinction between physical security and infrastructure maintenance as AWS-managed domains.
Exam Strategy
Always remember the phrase 'Security OF the Cloud' vs 'Security IN the Cloud'. If the option refers to physical buildings, cables, or the hypervisor/host OS, it is AWS. If it refers to data, permissions, guest OS, or apps, it is the customer.
Frequently Asked Questions
Does AWS patch the EC2 operating system?
Who configures Security Groups?
Community Votes
100% of anonymous learners picked answer CE. Votes are pick records left by other test-takers — they are not the verified answer.
Discussion 3 contributions
Compiled from public community threads and reader submissions, lightly edited for clarity. Handles and vote tallies are shown as recorded, and comments reflect the views of individual contributors.
From public community threads 3
-
ShaiTay 👍 2C & E are AWS responsibilities.
-
d00b229 👍 1C. Secure the access of physical AWS facilities. E. Perform infrastructure patching and maintenance.
-
Inptic 👍 1C and E are the answers
Reader comments & corrections
No reader corrections yet — spotted an error or have a note? Share it below.
Related Analysis
Practice All CLF-C02 Questions
Access 120 questions with complete answers and detailed explanations.
View Full CLF-C02 Practice Test →