Which TWO items is AWS responsible for under the shared responsibility model? (Select TWO.)
Choose 2 answers.
A.Physical security of data centers
Correct. Physical data center security is AWS's job.
B.Patching the guest operating system on EC2
Guest OS on EC2 is customer-managed.
C.Managing the virtualization/hypervisor layer
Correct. The hypervisor layer is AWS's responsibility.
D.Encrypting customer data the customer chose to encrypt
Choosing what to encrypt and managing keys is the customer's.
E.Configuring IAM user permissions
IAM configuration is entirely the customer's.
Why this answer
AWS is responsible for security OF the cloud: physical facilities, hardware, networking, and the virtualization layer. Guest OS patching, IAM configuration, and customer data decisions are customer responsibilities.
Correct answers: A, C · Last reviewed 2026-10-26
Official AWS references
Practice this interactively
Answer without seeing the solution first in the Security Basics practice session.
Practice Security Basics