Exam AWS Certified Cloud Practitioner topic 1 question 249 discussion

correct - Shared Controls – Controls which apply to both the infrastructure layer and customer layers, but in completely separate contexts or perspectives. In a shared control, AWS provides the requirements for the infrastructure and the customer must provide their own control implementation within their use of AWS services. Examples include: Patch Management – AWS is responsible for patching and fixing flaws within the infrastructure, but customers are responsible for patching their guest OS and applications. Configuration Management – AWS maintains the configuration of its infrastructure devices, but a customer is responsible for configuring their own guest operating systems, databases, and applications. Awareness & Training - AWS trains AWS employees, but a customer must train their own employees.

why not E?

Answer is correct A and C Configuration Management and Awareness & Training Patching the AWS RDS is AWS responsibility! --------------------------------------------------------------- Shared Controls : 1-Patch Management – AWS is responsible for patching and fixing flaws within the infrastructure, but customers are responsible for patching their guest OS and applications. 2-Configuration Management – AWS maintains the configuration of its infrastructure devices, but a customer is responsible for configuring their own guest operating systems, databases, and applications. 3-Awareness & Training - AWS trains AWS employees, but a customer must train their own employees. REF--------------------- https://aws.amazon.com/compliance/shared-responsibility-model/#:~:text=Shared%20Controls%20%E2%80%93%20Controls,their%20own%20employees.

AE = CORRECT

Shared Controls – Controls which apply to both the infrastructure layer and customer layers, but in completely separate contexts or perspectives. In a shared control, AWS provides the requirements for the infrastructure and the customer must provide their own control implementation within their use of AWS services. Examples include: Patch Management – AWS is responsible for patching and fixing flaws within the infrastructure, but customers are responsible for patching their guest OS and applications. Configuration Management – AWS maintains the configuration of its infrastructure devices, but a customer is responsible for configuring their own guest operating systems, databases, and applications. Awareness & Training - AWS trains AWS employees, but a customer must train their own employees. https://aws.amazon.com/compliance/shared-responsibility-model/

I am confused about the question. Actually who is responsible AWS or Customers?

A. Awareness and training C. Configuration management

Awareness and training is a shared responsibility between AWS and its customers. AWS provides security training and awareness resources to its customers, but it is ultimately the responsibility of the customer to ensure that their employees are aware of security best practices and how to implement them. Configuration management is also a shared responsibility. AWS provides tools and resources to help customers manage their configurations, but it is ultimately the responsibility of the customer to ensure that their configurations are secure.

Patch Management – AWS is responsible for patching and fixing flaws within the infrastructure, but customers are responsible for patching their guest OS and applications. Configuration Management – AWS maintains the configuration of its infrastructure devices, but a customer is responsible for configuring their own guest operating systems, databases, and applications. Awareness & Training - AWS trains AWS employees, but a customer must train their own employees.

Are those shared between AWS and Customer?

Two controls that are shared under the AWS Shared Responsibility Model are: A. Awareness and training: AWS provides guidance and resources to customers for establishing a strong security posture, but it is the customer's responsibility to ensure that their employees and contractors are trained and aware of security policies, procedures, and best practices. E. Service and communications protection or security: AWS is responsible for the security of the underlying infrastructure that supports its cloud services, while the customer is responsible for securing the applications and data that are deployed on top of that infrastructure. The customer must also protect the communication channels used to access and manage their AWS resources. Therefore, options A and E are the correct answers.

should be AC

anser =B&E??

AC is the answer.

A. Awareness and training C. Configuration management

agreed

Definitely A & C