Practice · Certified Cloud Security Engineer (C|CSE)

~/eccouncil-ccse · eccouncil-ccse_d1_d2887adf5fc2 ▊

← Certified Cloud Security Engineer (C|CSE) · practice sheet

eccouncil-ccse_d1_d2887adf5fc2 domain/d1 · medium single

During a planning meeting, a customer argues that because they use AWS, the provider is fully responsible for securing everything in their environment. According to the shared responsibility model described for cloud environments, how should the engineer correct this assumption?

A The provider secures the physical infrastructure, but the customer remains responsible for securing data assets and, depending on the service model, elements like application code
B The customer is responsible only for physical infrastructure while the provider secures all data and applications
C Responsibility is identical for every service and service model, so no evaluation is needed
D Once data is encrypted by the provider, the customer bears no further security obligations

Unlock this exam to join the per-question discussion and vote on questions.

next question →