Which controls are shared under the AWS shared responsibility model? (Select TWO.)

Which controls are shared under the AWS shared responsibility model? (Select TWO.)
A . Awareness and training
B. Patching of Amazon RDS
C. Configuration management
D. Physical and environmental controls
E. Service and communications protection or security

View Answer

Answer: A,C

Explanation:

In the AWS shared security model, a shared control, AWS provides the requirements for the infrastructure and the customer must provide their own control implementation within their use of AWS services.

Examples of shared controls include:

* Patch Management C AWS is responsible for patching and fixing flaws within the infrastructure, but customers are responsible for patching their guest OS and applications.

* Configuration Management C AWS maintains the configuration of its infrastructure devices, but a customer is responsible for configuring their own guest operating systems, databases, and applications.

* Awareness & Training C AWS trains AWS employees, but a customer must train their own employees.

Customer Specific C Controls which are solely the responsibility of the customer based on the application they are deploying within AWS services. Examples of customer specific controls include:

* Service and Communications Protection or Zone Security which may require a customer to route or zone data within specific security environments.