CLF-C02 Cloud Concepts Practice Question
A company uses Amazon RDS to run their production database. Under the AWS Shared Responsibility Model, who is responsible for patching the underlying database engine software?
⚠ Common exam trap
Many exam-takers confuse the customer's responsibility for managing database configuration (e.g., parameter groups, backups) with the engine patching, leading them to incorrectly select option A or C, when in fact AWS handles all underlying infrastructure and engine software patching in RDS.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
AWS, because RDS is a managed service that abstracts OS and engine management
Amazon RDS is a fully managed database service that automates the patching of the underlying database engine software. Under the AWS Shared Responsibility Model, AWS is responsible for the security of the cloud, which includes managing the host operating system and the database engine patches. The customer is responsible for data, access management, and application-level security, not the engine software patching.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
The customer, because they chose to run a relational database
Why it's wrong here
Choosing to run a relational database does not, by itself, assign patching responsibility; that depends entirely on the deployment model. If the customer installs a database engine on an EC2 instance, they manage OS and engine patches. But with Amazon RDS, the service is fully managed: AWS provisions the underlying OS, applies security updates, and patches the database engine automatically. Thus, the customer's decision to use a relational database via RDS is exactly why AWS, not the customer, performs the patching.
- ✓
AWS, because RDS is a managed service that abstracts OS and engine management
Why this is correct
RDS is a managed database service. AWS is responsible for patching the database engine (MySQL, PostgreSQL, etc.), the underlying OS, and the hardware. This is why RDS sits on the 'AWS manages' side for engine patching, unlike a self-managed DB on EC2.
- ✗
A shared responsibility where AWS and the customer each patch different components
Why it's wrong here
The Shared Responsibility Model for RDS is not a split where each side patches different software components of the engine. While the customer does own certain elements—such as database settings, scaling, backup configuration, and access controls—the actual patching of the database engine and the underlying OS is entirely AWS's obligation. AWS controls the maintenance window but the patching action itself is not shared; the customer merely chooses when it occurs. Therefore, saying the responsibility is shared for patching mischaracterizes the division of duties.
- ✗
A third-party DBA contracted by the customer
Why it's wrong here
Hiring a third-party DBA does not alter the responsibilities defined by the AWS Shared Responsibility Model, which operates strictly between AWS and the customer. A contracted DBA acts on behalf of the customer and can manage customer-side tasks like schema design, query tuning, and data optimization, but they cannot change AWS's obligation to patch the RDS engine or the host operating system. The patching responsibility remains with AWS because RDS is a managed service; third-party contractors never absorb AWS's portion of the model, even if they are deeply involved in database operations.
Go deeper
Related to this question
About these practice questions
Courseiva writes every CLF-C02 question from scratch — 993 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This CLF-C02 practice question is part of Courseiva's free Amazon Web Services certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the CLF-C02 exam.