Which practice should be implemented to secure a cloud environment effectively?

Question

Options

• AAvoiding regular security assessments
• BEnforcing encryption for data at rest and in transit
• CUsing single-factor authentication
• DAllowing unrestricted access

• A
  2% (1)
• B
  92% (44)
• C
  2% (1)
• D
  4% (2)

Explanation

Enforcing encryption for data at rest and in transit (B) is a foundational cloud security control that protects sensitive data from unauthorized access whether it's stored in databases/storage services or moving between systems - it ensures that even if data is intercepted or storage is compromised, it remains unreadable without the decryption keys. Options A, C, and D each represent well-known anti-patterns: skipping security assessments leaves vulnerabilities undetected, single-factor authentication is trivially bypassed through credential theft or phishing, and unrestricted access violates the principle of least privilege, which is a core tenet of zero-trust architecture. Together, these distractors represent the opposite of security best practices, making them easy to eliminate on the exam.

Memory tip: Think of encryption as the "lock on the safe" - it doesn't matter who gets into the building (network) or finds the safe (storage) if the lock (encryption) is strong. The other options all involve removing locks, which is never the right answer in a security context.

No community discussion yet for this question.