Question #1194
A company uses Amazon Relational Database Service (RDS). Which task is the responsibility of AWS, according to the AWS shared responsibility model?
Encrypting data stored in the RDS database instance.
Ensuring the physical security of the RDS database servers and facilities.
Managing database user accounts and access permissions.
Configuring database backup retention policies.
Explanation
The correct answer is B. Under the AWS shared responsibility model, AWS handles the security of the cloud, including physical security of data centers, servers, and networking hardware. This ensures facilities are protected from unauthorized access and environmental threats.
- A (Encrypting data): While AWS provides encryption tools (e.g., AWS KMS), enabling encryption and managing keys are the customer's responsibility.
- C (Managing user accounts): Customers control database-level access (e.g., creating users, granting permissions).
- D (Backup retention policies): Customers configure backup retention periods and manage recovery processes.
Key Point: AWS manages infrastructure security (physical/host/network layers), while customers handle data security, access controls, and application configurations.
Answer
The correct answer is: B