AWS Certified Cloud Practitioner / Question #1128 of 719

Question #1128

Which task is the responsibility of a company that is using Amazon RDS?

A

Ensure the physical security of the data centers.

B

Manage the encryption keys used for database storage.

C

Install and maintain the server hardware.

D

Apply patches to the RDS database engine.

Explanation

In the AWS Shared Responsibility Model, Amazon RDS falls under AWS's responsibility for managing the infrastructure, including physical security of data centers (A), server hardware (C), and applying patches to the database engine (D). However, the customer retains control over encryption keys used to protect their data. While AWS provides tools like AWS Key Management Service (KMS) to simplify key management, the customer must still manage key policies, rotation, and access controls. Options A, C, and D are handled by AWS, making B the correct answer. Key takeaway: Customers using RDS are responsible for data encryption and key management, while AWS manages the underlying infrastructure and database engine maintenance.

Answer

The correct answer is: B