Exam AWS Certified Cloud Practitioner topic 1 question 197 discussion

Refer to: https://aws.amazon.com/compliance/shared-responsibility-model/ Shared Controls – Controls which apply to both the infrastructure layer and customer layers, but in completely separate contexts or perspectives. In a shared control, AWS provides the requirements for the infrastructure and the customer must provide their own control implementation within their use of AWS services. Examples include: 1. Patch Management – AWS is responsible for patching and fixing flaws within the infrastructure, but customers are responsible for patching their guest OS and applications. 2. Configuration Management – AWS maintains the configuration of its infrastructure devices, but a customer is responsible for configuring their own guest operating systems, databases, and applications. 3. Awareness & Training - AWS trains AWS employees, but a customer must train their own employees.

B - AWS D- inhert responsibilty not shared E. AWS

B is customer resp. D is AWS resp.

A. Resource configuration management C. Employee awareness and training

A. Resource configuration management: Both AWS and the customer share the responsibility of properly configuring and managing the resources they use in the AWS environment. C. Employee awareness and training: Both AWS and the customer share the responsibility of ensuring that employees are aware of and trained in security best practices and compliance requirements.

The two shared controls that apply to both AWS and the customer, according to the AWS shared responsibility model, are: A. Resource configuration management: AWS is responsible for the security of the cloud, while customers are responsible for the security of their content and applications in the cloud. Customers are responsible for configuring their resources securely, including storage, compute, and network configurations. C. Employee awareness and training: AWS is responsible for ensuring that its employees are trained and aware of security risks and procedures related to their work. Customers are responsible for ensuring that their employees are trained and aware of security risks and procedures related to their use of AWS services.

AC is the answer.

AC is what I would select here.