Machine-translated by Google. Questions are authored in English.
Top

Discussion

Consider the following statements about compliance regimes.
1. A provider's certification does not by itself make the customer compliant.
2. The customer must still configure and operate their part correctly.
3. Deploying to a certified region guarantees the customer is compliant.

  • A.1 only
  • B.All of them
  • C.1 and 2 only
  • D.3 only

Answer: C

Correct answer: 1 and 2 only

Statements 1 and 2 are correct and are the whole of the shared responsibility position. A provider’s certification covers the provider’s part of the stack; the customer’s configuration, access control, encryption choices and operating practice are the customer’s part and are audited separately. Statement 3 is the misconception those two exist to correct - a certified region is a prerequisite, not a guarantee.

No comment is present. Be the first to comment.
Loading…

Post your comment

Please log in or register to post a comment.