Classify security and operational tasks across EC2, RDS, Lambda, and S3, then explain why the boundary moves by service model.
1.Patching the physical host that runs an EC2 instance
2.Patching the guest operating system on an EC2 instance
3.Configuring an RDS security group
4.Replacing failed disks beneath Amazon S3
5.Classifying objects stored in S3
6.Securing custom code executed by Lambda
7.Maintaining the RDS database host operating system
8.Choosing who may decrypt data with a customer-managed KMS key
9.Protecting AWS data-center physical access
10.Testing whether the customer application meets its compliance obligations
Objectifs
- Assign each task to AWS, the customer, or a shared outcome.
- Distinguish infrastructure operation from workload configuration.
- Score at least 80% and review every explanation.
Indices