QUALYS PATCH MANAGEMENT ACTUAL
TEST QUESTIONS WITH COMPLETE
ANSWER KEY
●● What is AWS responsible for under the shared responsibility model?
Answer: Hardware, the global infrastructure of regions, availability
zones and edge locations, physical data center security, the virtualization
layer, and managed service infrastructure.
●● What is the customer always responsible for, no matter which AWS
service they use?
Answer: Their data — who has access to it and how it is classified.
●● Who patches the operating system on an EC2 instance?
Answer: The customer. You control the guest operating system entirely.
●● Who patches the operating system underneath Amazon RDS?
Answer: AWS. RDS is a managed service, so AWS handles the database
engine and the underlying operating system.
●● Who patches the operating system for AWS Lambda?
Answer: AWS. There is no server for you to patch — you only own the
code.
,●● A company needs to launch a database where the customer assumes
responsibility for the guest operating system, including updates and
security patches. Which service should they use?
Answer: Amazon EC2, with the database installed yourself. Every
managed database takes guest OS management away from you.
●● Who patches the HOST operating system, and who patches the
GUEST operating system?
Answer: AWS patches the host. The customer patches the guest. One
word changes the owner.
●● Name the three types of IT controls in the shared responsibility
model.
Answer: Inherited controls, shared controls, and customer specific
controls.
●● Give an example of a control the customer fully inherits from AWS.
Answer: Physical and environmental controls — data center security,
power, and cooling. You do nothing.
●● Name the three shared controls in the shared responsibility model.
Answer: Patch Management, Configuration Management, and
Awareness and Training.
, ●● Why is Awareness and Training considered a shared control rather
than a customer-only control?
Answer: Because AWS trains its own employees and you must train
yours. Both parties do a version of the same thing.
●● Why is Patch Management a shared control?
Answer: AWS patches and fixes flaws in the infrastructure, but the
customer patches their guest operating system and applications.
●● Why is Configuration Management a shared control?
Answer: AWS maintains the configuration of its infrastructure devices,
but the customer configures their own guest operating systems,
databases, and applications.
●● Give an example of a control that is solely the customer's
responsibility.
Answer: Service and Communications Protection, also called Zone
Security — routing or zoning data within specific security environments.
●● Is data encryption a shared responsibility?
Answer: No. Both client-side and server-side encryption are entirely the
customer's responsibility.
TEST QUESTIONS WITH COMPLETE
ANSWER KEY
●● What is AWS responsible for under the shared responsibility model?
Answer: Hardware, the global infrastructure of regions, availability
zones and edge locations, physical data center security, the virtualization
layer, and managed service infrastructure.
●● What is the customer always responsible for, no matter which AWS
service they use?
Answer: Their data — who has access to it and how it is classified.
●● Who patches the operating system on an EC2 instance?
Answer: The customer. You control the guest operating system entirely.
●● Who patches the operating system underneath Amazon RDS?
Answer: AWS. RDS is a managed service, so AWS handles the database
engine and the underlying operating system.
●● Who patches the operating system for AWS Lambda?
Answer: AWS. There is no server for you to patch — you only own the
code.
,●● A company needs to launch a database where the customer assumes
responsibility for the guest operating system, including updates and
security patches. Which service should they use?
Answer: Amazon EC2, with the database installed yourself. Every
managed database takes guest OS management away from you.
●● Who patches the HOST operating system, and who patches the
GUEST operating system?
Answer: AWS patches the host. The customer patches the guest. One
word changes the owner.
●● Name the three types of IT controls in the shared responsibility
model.
Answer: Inherited controls, shared controls, and customer specific
controls.
●● Give an example of a control the customer fully inherits from AWS.
Answer: Physical and environmental controls — data center security,
power, and cooling. You do nothing.
●● Name the three shared controls in the shared responsibility model.
Answer: Patch Management, Configuration Management, and
Awareness and Training.
, ●● Why is Awareness and Training considered a shared control rather
than a customer-only control?
Answer: Because AWS trains its own employees and you must train
yours. Both parties do a version of the same thing.
●● Why is Patch Management a shared control?
Answer: AWS patches and fixes flaws in the infrastructure, but the
customer patches their guest operating system and applications.
●● Why is Configuration Management a shared control?
Answer: AWS maintains the configuration of its infrastructure devices,
but the customer configures their own guest operating systems,
databases, and applications.
●● Give an example of a control that is solely the customer's
responsibility.
Answer: Service and Communications Protection, also called Zone
Security — routing or zoning data within specific security environments.
●● Is data encryption a shared responsibility?
Answer: No. Both client-side and server-side encryption are entirely the
customer's responsibility.
