Which of the following is the responsibility of AWS?
A . Setting up AWS Identity and Access Management (IAM) users and groups
B . Physically destroying storage media at end of life
C . Patching guest operating systems
D . Configuring security settings on Amazon EC2 instances
Answer: B
Explanation:
Media storage devices used to store customer data are classified by AWS as Critical and treated accordingly, as high impact, throughout their life-cycles. AWS has exacting standards on how to install, service, and eventually destroy the devices when they are no longer useful. When a storage device has reached the end of its useful life, AWS decommissions media using techniques detailed in NIST 800-88. Media that stored customer data is not removed from AWS control until it has been securely decommissioned.
Reference: https://aws.amazon.com/compliance/data-center/controls/
Leave a Reply