Once the Deployment finishes, Cloud Security Posture Management applies default network security posture that does what?

Question

Options

• AMinimizes the risk of external threats by blocking access to high risk sites and external users
• BMinimizes the risk of external threats by blocking accessed to the internet
• CMinimizes the risk of external threats by blocking access to all internal resources
• DMinimizes the risks of external threats by blocking access to services and ports

• A
  3% (1)
• B
  3% (1)
• D
  95% (38)

Explanation

Option D is correct because CSPM's default network security posture operates at the service and port level - it applies a least-privilege model by blocking access to services and ports that are not explicitly required, reducing the attack surface exposed to external threats.

Why the distractors are wrong:

• A is incorrect because blocking "high risk sites and external users" describes web filtering or identity-based access control, not a default posture policy.
• B is incorrect because blocking all internet access would break most cloud workloads that require internet connectivity for updates, APIs, and user traffic.
• C is incorrect because blocking all internal resources would prevent legitimate internal communication, making the deployment non-functional.

Memory tip: Think of CSPM's default posture as a "port/service lockdown" - it doesn't care about who is connecting or where they're connecting to, it controls how (which services/ports) anything can connect. If a port isn't needed, it's blocked by default.

No community discussion yet for this question.