A company runs its application on Amazon EC2. Under the shared responsibility model, which task remains the customer's responsibility?

1. Install security updates for the guest operating system on its EC2 instances.
2. Patch the underlying AWS host hypervisor.
3. Control physical entry to AWS server rooms.
4. Replace failed physical disks in the AWS data center.