The correct customer responsibilities are Encrypting stored application data and Training the company's workforce on secure use of AWS services.

Encrypting stored application data is a customer task because customers decide which data to encrypt, how to manage keys, and which services or client side methods to use. Customers must configure encryption at rest and manage access to keys and encryption settings to meet compliance and confidentiality needs.

Training the company's workforce on secure use of AWS services is also a customer obligation because secure configurations and proper use of IAM and service features depend on user actions. Educating staff reduces misconfiguration risks and enforces least privilege and secure data handling practices.

Controlling physical access to AWS facilities is incorrect because AWS is responsible for physical security of its data centers and the controls around facility access.

Decommissioning and destroying retired AWS hardware is incorrect because AWS performs hardware disposal and media sanitization under its infrastructure responsibilities.

Patching and maintaining the EC2 host hypervisor layer is incorrect because AWS manages the underlying host operating systems and hypervisor as part of securing the cloud infrastructure.

Full AWS Practitioner Certification Question