Which security measures fall under the responsibility of AWS?
(Choose two.)
Running a virus scan on EC2 instances
Protecting against IP spoofing and packet sniffing
Installing the latest security patches on the RDS instance
Encrypting communication between the EC2 instances and the Elastic Load Balancer
Configuring a security group and a network access control list (NACL) for EC2 instances
Explanations:
Running virus scans on EC2 instances falls under the user’s responsibility as it involves instance-level management.
AWS is responsible for protecting the underlying infrastructure, including measures against IP spoofing and packet sniffing.
AWS manages the security of RDS instances, including installing security patches to maintain the database environment.
While AWS provides options for encryption, configuring the encryption of data in transit is the user’s responsibility.
Security group and NACL configuration is part of the network configuration, which is the user’s responsibility on AWS.
I judge that the answer is:
Protecting against IP spoofing and packet sniffing