Which of the following options are the company’s responsibility within the Shared Responsibility Model?
(Choose two.)
AWS API endpoint SSL Certificates
EC2 Instance Operating System updates
EBS Encryption-at-result algorithms
IAM user password policies
AWS Hypervisor software updates
Explanations:
AWS manages the SSL certificates for API endpoints. It is part of the underlying infrastructure that AWS handles.
The operating system on EC2 instances is the responsibility of the customer to maintain, including updates and patches.
EBS encryption is handled by AWS, and customers select the encryption settings, but the encryption algorithms are part of AWS’s infrastructure responsibility.
IAM user password policies are the responsibility of the customer to configure and enforce.
AWS is responsible for the management of the hypervisor and the underlying infrastructure, including software updates.