Exam AWS Certified Cloud Practitioner topic 1 question 531 discussion

B. Encrypt data and maintain data integrity. D. Maintain identity and access management controls.

B and D

BD is correct

D. Maintain identity and access management controls. B. Encrypt data and maintain data integrity.

BD is correct

Shared Controls – Controls which apply to both the infrastructure layer and customer layers, but in completely separate contexts or perspectives. In a shared control, AWS provides the requirements for the infrastructure and the customer must provide their own control implementation within their use of AWS services. Examples include: Patch Management – AWS is responsible for patching and fixing flaws within the infrastructure, but customers are responsible for patching their guest OS and applications. Configuration Management – AWS maintains the configuration of its infrastructure devices, but a customer is responsible for configuring their own guest operating systems, databases, and applications. Awareness & Training - AWS trains AWS employees, but a customer must train their own employees. B. Encrypt data and maintain data integrity. both are responsible it, not the customers tasks only, which make the answers C & D

BD is the answer.

D. Maintain identity and access management controls. The AWS shared responsibility model defines the security responsibilities of both the customer and AWS. According to this model, the customer is responsible for: B. Encrypting data and maintaining data integrity: This means that the customer is responsible for encrypting sensitive data, both at rest and in transit, as well as maintaining data integrity by ensuring that data is not tampered with or modified without authorization. D. Maintaining identity and access management controls: This means that the customer is responsible for managing the identities and access rights of users and applications that access resources on AWS. This includes tasks such as creating and managing users, groups, and roles, as well as setting up and enforcing access policies.

C, D. It is obvious E is not customer’s responsibility.