Scenario Practice

Security and Compliance · 30% of exam

A company stores customer data in Amazon RDS and wants to know who is responsible for patching the underlying database engine software versus who is responsible for encrypting the data itself. Under the AWS Shared Responsibility Model, how does this split?

AWS patches the engine; the customer configures encryption and access The customer patches the engine; AWS configures encryption AWS is responsible for both entirely The customer is responsible for both entirely

Explain your reasoning

Writing a sentence before submitting forces active recall — this is the part that actually builds retention.

How confident are you?

1 2 3 4 5

Guessing Certain