AWS Certified Cloud Practitioner / Question #952 of 719

Question #952

A company is deploying a web application on AWS. Which service requires them to manage security updates for the underlying server's operating system?

A

AWS Lambda

B

Amazon RDS

C

Amazon EC2

D

Amazon CloudFront

Explanation

The correct answer is C (Amazon EC2).

- Amazon EC2 provides virtual servers where users have full control over the OS. This means they are responsible for security updates, patches, and maintenance of the OS.

- AWS Lambda (A) is serverless; AWS manages the infrastructure, including OS updates.
- Amazon RDS (B) is a managed database service; AWS handles OS and database engine maintenance.
- Amazon CloudFront (D) is a CDN; AWS manages all server-side infrastructure.

Key Point: EC2 is Infrastructure-as-a-Service (IaaS), requiring user responsibility for OS security. Other options are fully managed (PaaS/SaaS), where AWS handles OS updates.

Answer

The correct answer is: C