Shared Responsibility Model
- Customer = Responsibility For The Security In the Cloud
- AWS = Responsibility For the Security of the Cloud
Question 1:
You ONLY want to manage Applications and Data. Which type of Cloud Computing model should you use? => Paas(Platform as a Service)
Question 2:
What is the pricing model of Cloud Computing? => Pay-as-you-go Pricing
Question 3:
Which Global Infrastructure identity is composed of one or more discrete data centers with redundant power, networking, and connectivity, and are used to deploy infrastructure?
=> Availability Zones
Question 5:
Which are the 3 pricing fundamentals of the AWS Cloud?
=> Compute, Storage, and data transfer out of the AWS Cloud are the 3 pricing fundamentals of the AWS Cloud.
Question 6:
Which of the following options is NOT a point of consideration when choosing an AWS Region?
=> Capacity is unlimited in the cloud, you do not need to worry about it.
=> The 4 points of considerations when choosing an AWS Region are: compliance with data governance and legal requirements, proximity to customers, available services and features within a Region, and pricing.
Question 8:
AWS Regions are composed of?
- AWS Regions consist of multiple, isolated, and physically separate Availability Zones within a geographic area.
Question 9:
Which of the following services has a global scope?
- IAM, AWS Organizations, Amazon CloudFront, Amazon Route53, AWS Global Accelerator, AWS Direct Connect, AWS Firewall Manager, AWS Web Application Firewall (WAF), and AWS Shield
Question 11:
What defines the distribution of responsibilities for security in the AWS Cloud?
=> the Shared Responsibility Model defines who is responsible for what in the AWS Cloud.
Question 12:
A company would like to benefit from the advantages of the Public Cloud but would like to keep sensitive assets in its own infrastructure. Which deployment model should the company use?
=> Using a Hybrid Cloud deployment model allows you to benefit from the flexibility, scalability and on-demand storage access while keeping security and performance of your own infrastructure.
Question 13:
What is NOT authorized to do on AWS according to the AWS Acceptable Use Policy?
=> You can run analytics on AWS, but you cannot run analytics on fraudulent(사기적인) content. Refer to the AWS Acceptable Use Policy to see what is not authorized to do on AWS.
