Exam Bundle

AWS physical infrastructure responsibility covers the provider-operated buildings, hardware and underlying network. This does not address the need for An operations team runs self-managed Linux on an EC2 instance and must apply operating-system security updates. The appropriate Customer guest OS responsibility applies because On EC2 the customer manages and patches the guest operating system, while AWS protects infrastructure below it.

AWS hypervisor responsibility covers AWS administration of the host virtualization platform. This does not address the need for An operations team runs self-managed Linux on an EC2 instance and must apply operating-system security updates. The appropriate Customer guest OS responsibility applies because On EC2 the customer manages and patches the guest operating system, while AWS protects infrastructure below it.

AWS data-center access controls: Refer to AWS physical facility access, not customer application logins. This does not address the need for An operations team runs self-managed Linux on an EC2 instance and must apply operating-system security updates. The appropriate Customer guest OS responsibility applies because On EC2 the customer manages and patches the guest operating system, while AWS protects infrastructure below it.

AWS hypervisor responsibility covers AWS administration of the host virtualization platform. That does not meet the requirement: A bank hosts Windows on EC2 and needs an accountable owner for guest operating-system patches.

AWS data-center access controls: Refer to AWS physical facility access, not customer application logins. That does not meet the requirement: A bank hosts Windows on EC2 and needs an accountable owner for guest operating-system patches.

AWS physical infrastructure responsibility covers the provider-operated buildings, hardware and underlying network. That does not meet the requirement: A bank hosts Windows on EC2 and needs an accountable owner for guest operating-system patches.

AWS physical infrastructure responsibility covers the provider-operated buildings, hardware and underlying network. This does not address the need for A bank hosts Windows on EC2 and needs an accountable owner for guest operating-system patches. The appropriate Customer guest OS responsibility applies because On EC2 the customer manages and patches the guest operating system, while AWS protects infrastructure below it.

AWS hypervisor responsibility covers AWS administration of the host virtualization platform. This does not address the need for A bank hosts Windows on EC2 and needs an accountable owner for guest operating-system patches. The appropriate Customer guest OS responsibility applies because On EC2 the customer manages and patches the guest operating system, while AWS protects infrastructure below it.

AWS data-center access controls: Refer to AWS physical facility access, not customer application logins. This does not address the need for A bank hosts Windows on EC2 and needs an accountable owner for guest operating-system patches. The appropriate Customer guest OS responsibility applies because On EC2 the customer manages and patches the guest operating system, while AWS protects infrastructure below it.

AWS hardware replacement is handled by AWS for its underlying managed infrastructure. That does not meet the requirement: Consider this AWS requirement: An online shop hosts EC2 instances and needs rules permitting only the necessary inbound network traffic.

AWS physical security protects AWS facilities and their equipment from physical intrusion. That does not meet the requirement: Consider this AWS requirement: An online shop hosts EC2 instances and needs rules permitting only the necessary inbound network traffic.

AWS power redundancy provides multiple electrical supply paths for infrastructure availability. That does not meet the requirement: Consider this AWS requirement: An online shop hosts EC2 instances and needs rules permitting only the necessary inbound network traffic.

AWS power redundancy provides multiple electrical supply paths for infrastructure availability. This does not address the need for An online shop hosts EC2 instances and needs rules permitting only the necessary inbound network traffic. The appropriate Customer security group configuration applies because Customers configure security group policies protecting their own EC2 network interfaces.

AWS physical security protects AWS facilities and their equipment from physical intrusion. This does not address the need for An online shop hosts EC2 instances and needs rules permitting only the necessary inbound network traffic. The appropriate Customer security group configuration applies because Customers configure security group policies protecting their own EC2 network interfaces.

AWS hardware replacement is handled by AWS for its underlying managed infrastructure. This does not address the need for An online shop hosts EC2 instances and needs rules permitting only the necessary inbound network traffic. The appropriate Customer security group configuration applies because Customers configure security group policies protecting their own EC2 network interfaces.

AWS hardware replacement is handled by AWS for its underlying managed infrastructure. That does not meet the requirement: A finance team must restrict instance network access to its approved application ports.

AWS physical security protects AWS facilities and their equipment from physical intrusion. That does not meet the requirement: A finance team must restrict instance network access to its approved application ports.

AWS power redundancy provides multiple electrical supply paths for infrastructure availability. That does not meet the requirement: A finance team must restrict instance network access to its approved application ports.

AWS physical security protects AWS facilities and their equipment from physical intrusion. This does not address the need for A finance team must restrict instance network access to its approved application ports. The appropriate Customer security group configuration applies because Customers configure security group policies protecting their own EC2 network interfaces.

AWS power redundancy provides multiple electrical supply paths for infrastructure availability. This does not address the need for A finance team must restrict instance network access to its approved application ports. The appropriate Customer security group configuration applies because Customers configure security group policies protecting their own EC2 network interfaces.

AWS hardware replacement is handled by AWS for its underlying managed infrastructure. This does not address the need for A finance team must restrict instance network access to its approved application ports. The appropriate Customer security group configuration applies because Customers configure security group policies protecting their own EC2 network interfaces.

AWS physical facility guards: Protect access to AWS-operated buildings. That does not meet the requirement: A technical reviewer evaluates this need: A developer stores customer records on EC2-attached volumes and must decide access and encryption settings.

AWS region expansion is a provider decision about building out AWS geographic infrastructure. That does not meet the requirement: A technical reviewer evaluates this need: A developer stores customer records on EC2-attached volumes and must decide access and encryption settings.

AWS hypervisor patching concerns patching the AWS-managed virtualization layer rather than customers managing their application. That does not meet the requirement: A technical reviewer evaluates this need: A developer stores customer records on EC2-attached volumes and must decide access and encryption settings.

AWS hypervisor patching concerns patching the AWS-managed virtualization layer rather than customers managing their application. This does not address the need for A developer stores customer records on EC2-attached volumes and must decide access and encryption settings. The appropriate Customer data protection responsibility applies because Customers control the protection of their data and encryption choices while AWS secures underlying cloud facilities.

AWS region expansion is a provider decision about building out AWS geographic infrastructure. This does not address the need for A developer stores customer records on EC2-attached volumes and must decide access and encryption settings. The appropriate Customer data protection responsibility applies because Customers control the protection of their data and encryption choices while AWS secures underlying cloud facilities.

AWS physical facility guards: Protect access to AWS-operated buildings. This does not address the need for A developer stores customer records on EC2-attached volumes and must decide access and encryption settings. The appropriate Customer data protection responsibility applies because Customers control the protection of their data and encryption choices while AWS secures underlying cloud facilities.

AWS hypervisor patching concerns patching the AWS-managed virtualization layer rather than customers managing their application. That does not meet the requirement: An application owner needs to protect its data on self-managed virtual machines.

AWS physical facility guards: Protect access to AWS-operated buildings. That does not meet the requirement: An application owner needs to protect its data on self-managed virtual machines.

AWS region expansion is a provider decision about building out AWS geographic infrastructure. That does not meet the requirement: An application owner needs to protect its data on self-managed virtual machines.

AWS region expansion is a provider decision about building out AWS geographic infrastructure. This does not address the need for An application owner needs to protect its data on self-managed virtual machines. The appropriate Customer data protection responsibility applies because Customers control the protection of their data and encryption choices while AWS secures underlying cloud facilities.

AWS physical facility guards: Protect access to AWS-operated buildings. This does not address the need for An application owner needs to protect its data on self-managed virtual machines. The appropriate Customer data protection responsibility applies because Customers control the protection of their data and encryption choices while AWS secures underlying cloud facilities.

AWS hypervisor patching concerns patching the AWS-managed virtualization layer rather than customers managing their application. This does not address the need for An application owner needs to protect its data on self-managed virtual machines. The appropriate Customer data protection responsibility applies because Customers control the protection of their data and encryption choices while AWS secures underlying cloud facilities.