Amazon Web Services Updated CLF-C02 Exam Questions and Answers by aasiyah

Customers are responsible for configuring and maintaining guest operating systems and applications on services where the customer controls those components, such as Amazon EC2. This includes security settings, software updates, application configuration, and guest operating system patching. Customers are also responsible for managing their data, including choosing and configuring appropriate encryption options. Therefore, options C and D are correct. AWS is responsible for maintaining the configuration of its underlying infrastructure devices, patching and updating the physical and foundational infrastructure, and maintaining the servers, storage devices, networking equipment, and facilities that operate AWS services. These AWS responsibilities are collectively described as securityofthe cloud. Customer responsibilities vary according to the service selected. For highly abstracted services such as Amazon S3, AWS also manages the operating system and platform, while the customer manages data, permissions, encryption choices, and service configuration. For infrastructure services such as EC2, the customer assumes more responsibility for the guest operating system and installed software. The question’s distinction is between AWS-owned infrastructure and customer-controlled workloads, configurations, applications, and data-protection decisions.

AWS Systems Manager offers the capability to automate patching for Amazon EC2 instances, including Windows instances, through Patch Manager. It can automate patching tasks, schedule updates, and apply patches based on specified baselines. AWS Organizations and Control Tower focus on account management and governance, while Elastic Load Balancing (ELB) is unrelated to patch management.