Timedora
Free Practice Quiz Question List

1 The AWS Shared Responsibility Model Online Quiz Questions

Use this free practice quiz with 20 questions to review 1 The AWS Shared Responsibility Model, test your knowledge, and prepare for your next test or exam.

20 questions
01
True or false
1 point

True or false: AWS is responsible for security of the cloud, while customers are responsible for security in the cloud.

  1. A

    True

  2. B

    False

02
Fill in the blank
1 point

AWS is responsible for security .

03
Written response
1 point

Which AWS service manages the infrastructure, execution environment, and runtime platform for serverless functions, while leaving customers responsible for function code and libraries?

04
Choose one
1 point

A team runs an application on an Amazon EC2 instance. Which division of responsibility should it expect for the instance's guest operating system and the underlying virtualization?

  1. A

    AWS patches and hardens the guest operating system, while the customer maintains the physical facilities.

  2. B

    The customer patches and hardens the guest operating system, while AWS manages the physical facilities and virtualization.

  3. C

    AWS manages the guest operating system and installed applications, while the customer manages virtualization.

  4. D

    The customer manages the physical facilities and hardware, while AWS manages the guest operating system.

05
Choose all
1 point

A company stores sensitive files in Amazon S3. Select all of the following that are generally customer responsibilities under the shared responsibility model.

  1. A

    Classifying the stored data

  2. B

    Managing the storage platform

  3. C

    Setting permissions

  4. D

    Choosing encryption settings

  5. E

    Monitoring the data and resource

06
Fill in the blank
1 point

Customers are responsible for security , including their data, identities, applications, and resource configuration.

07
Choose one
1 point

A company uses Amazon RDS rather than managing a database on its own virtual machine. Which set of responsibilities should the company still expect to manage?

  1. A

    AWS manages all data access, network exposure, and customer database settings.

  2. B

    The customer manages the hosting infrastructure and all operating-system maintenance.

  3. C

    The customer manages data, access, network exposure, database configuration and use, and service settings such as maintenance choices.

  4. D

    AWS is responsible for the customer's application and legal obligations because the database is managed.

08
Written response
1 point

What security principle should guide IAM role and policy design so that each user or service receives only the permissions it needs?

09
Choose one
1 point

A customer discovers that an access policy grants much broader permissions than its application needs. The AWS infrastructure is secure. What is the appropriate response under the shared responsibility model?

  1. A

    AWS must correct the permission because AWS manages the underlying infrastructure.

  2. B

    The customer should review and narrow the permission because customer access policies can expose data.

  3. C

    No action is needed if the application runs on an AWS service.

  4. D

    The customer should transfer responsibility for the permission to AWS by using an IAM role.

10
Choose all
1 point

An organization is assessing compliance for a workload running on AWS. Select all statements that accurately describe how AWS audit reports and certifications can be used.

  1. A

    AWS audit reports and certifications can support an assessment of controls inherited from AWS.

  2. B

    AWS reports automatically establish that a customer's particular workload is compliant.

  3. C

    The organization must determine which controls it inherits, which are shared, and which it must implement and document.

  4. D

    Using AWS removes the organization's need to assess its own compliance obligations.

11
True or false
1 point

True or false: Moving to a managed AWS service can reduce infrastructure work, but it does not automatically secure the customer's application or data.

  1. A

    True

  2. B

    False

12
Choose one
1 point

A managed AWS service offers patches for its platform. Which approach best reflects the shared responsibility model?

  1. A

    AWS handles every patch decision, so the customer need not review updates.

  2. B

    The customer must create and validate all patches for the managed service.

  3. C

    AWS may provide and validate patches, while the customer reviews updates and schedules or applies them as required.

  4. D

    The customer is responsible only for patching AWS's physical hardware.

13
Choose one
1 point

A team is assigning security controls for an AWS service whose responsibilities may depend on its configuration. What should it do before finalizing the assignment?

  1. A

    Apply the same responsibility boundary to every AWS service without checking its configuration.

  2. B

    Use the general model as a guide and verify the boundary in documentation for the specific service.

  3. C

    Assume AWS manages customer data whenever a service is managed.

  4. D

    Treat the division of responsibility as fixed even when the service configuration changes.

14
Open ended
1 point

Your organization is preparing a responsibility matrix for an AWS workload. Describe what the matrix should record and when the organization should revisit it.

15
Choose one
1 point

A company is assigning security controls for a workload hosted on AWS. Which control is generally AWS's responsibility under the shared responsibility model?

  1. A

    Classifying an organization's data

  2. B

    Maintaining the physical facilities that host AWS services

  3. C

    Choosing which users can access an organization's application

  4. D

    Configuring an organization's application

16
Choose one
1 point

A team runs an application on an Amazon EC2 instance. Which task should the team generally plan to manage?

  1. A

    Patching the physical AWS host

  2. B

    Maintaining the AWS virtualization layer

  3. C

    Patching the guest operating system on the instance

  4. D

    Maintaining the AWS data center

17
Choose one
1 point

An organization stores sensitive files in Amazon S3. Which action is generally the organization's responsibility?

  1. A

    Maintaining the S3 storage platform

  2. B

    Classifying sensitive data and choosing suitable permissions

  3. C

    Maintaining the operating system for S3

  4. D

    Operating the infrastructure that hosts S3

18
True or false
1 point

AWS audit reports and certifications can support a customer's assessment of inherited controls, but they do not by themselves certify the customer's workload or make the organization compliant. True or false?

  1. A

    True

  2. B

    False

19
Written response
1 point

A security team wants to record who performs and verifies controls such as patching, encryption, and logging. What practical governance tool can it use?

20
Written response
1 point

A risk analyst needs to locate AWS compliance reports while assessing which controls may be inherited from AWS. Which AWS service provides access to those reports? Enter the service name.