A municipal auditor asks who patches the guest operating system on Amazon EC2 instances versus who secures the AWS data centers. Which statement correctly applies the shared responsibility model?
Select an answer to reveal the explanation.
Short Explanation
On EC2, you still own the guest OS like you own the software inside a rented apartment—AWS owns the building and the locks on the street. Patch the OS and apps yourself; leave the data center perimeter to AWS. That split is the shared responsibility model at IaaS depth.
Full Explanation
Under the AWS shared responsibility model, AWS secures the cloud infrastructure (facilities, hardware, virtualization substrate), while customers secure what they run in the cloud. For EC2, that includes guest operating system patches, network and firewall configuration they control, and application security. Misassigning OS patching to AWS or facility security to the city reflects a Cloud Practitioner-level vocabulary error applied incorrectly to an architecture review.