Question 330
A cloud readiness review raises three separate requirements. Finding 1: A company puts documents in an Amazon S3 bucket and claims AWS alone must choose who may read them. Finding 2: An organization stores protected data in AWS and assumes compliance with its industry's rules is automatic just because the platform holds certifications. Finding 3: A manager wants to compare the responsibility boundary for Lambda with the boundary for an EC2 instance running the same business logic. Which complete response addresses all three findings in order?
Explanation
Correct Answer
For finding 1: Customers control access to their content even when AWS operates the storage service infrastructure. For finding 2: Provider certifications do not automatically establish the customer's complete workload compliance. For finding 3: Security responsibility shifts with service abstraction rather than disappearing when infrastructure is managed. All three decisions are needed.
Incorrect Answers
For finding 3: Security responsibility shifts with service abstraction rather than disappearing when infrastructure is managed. That action addresses a different situation: A team deploys an AWS Lambda function and assumes the function's application code is patched and secured automatically by AWS.
For finding 1: Customers control access to their content even when AWS operates the storage service infrastructure. That action addresses a different situation: A team deploys an AWS Lambda function and assumes the function's application code is patched and secured automatically by AWS.
For finding 2: Provider certifications do not automatically establish the customer's complete workload compliance. That action addresses a different situation: A team deploys an AWS Lambda function and assumes the function's application code is patched and secured automatically by AWS.






AWS Certified Cloud Practitioner CLF-C02 Practice Tests