AWS Certified Cloud Practitioner

Explanation

In the AWS Shared Responsibility Model:

Correct Answers:

• A: Configuration management of infrastructure devices is the customer's responsibility. - This is correct. Customers are responsible for managing the configuration of their AWS resources, security groups, and network access control lists.
• C: AWS is responsible for protecting the physical cloud infrastructure. - This is correct. AWS is responsible for the security "of" the cloud, including physical infrastructure, hardware, software, networking, and facilities.

Incorrect Answers:

• B: For Amazon S3, AWS operates the infrastructure layer, the operating systems, and the platforms. - This is partially true but not a complete aspect of the shared responsibility model. While AWS manages the underlying infrastructure for S3, customers are still responsible for their data security, access controls, and encryption.
• D: AWS is responsible for training the customer's employees on AWS products and services. - This is incorrect. AWS provides documentation and training resources, but the actual training of employees is the customer's responsibility.
• E: For Amazon EC2, AWS is responsible for maintaining the guest operating system. - This is incorrect. For EC2 instances, customers are responsible for maintaining the guest operating system, applications, and security patches.

Key Points:

• AWS is responsible for security OF the cloud (infrastructure)
• Customer is responsible for security IN the cloud (data, applications, configurations)
• The division of responsibilities varies by AWS service type (IaaS, PaaS, SaaS)