Which practice is essential for maintaining security and compliance in a software-defined cloud environment?

Question

Options

• ARegular physical audits of data centers
• BConsistent application of security policies across all infrastructure as code (IaC) templates
• CIsolating development environments from the internet
• DUsing only traditional VM-based environments to reduce complexity

• A
  4% (2)
• B
  71% (39)
• C
  9% (5)
• D
  16% (9)

Explanation

In a software-defined cloud environment, infrastructure is defined and managed through code, so security must be enforced at the code level - making consistent application of security policies across all IaC templates (B) the only scalable, enforceable approach to compliance.

Why the distractors fail:

• A is wrong because physical audits apply to on-premises data centers; in cloud environments, the physical layer is the provider's responsibility, not yours.
• C is a reasonable dev practice but not essential for compliance - it doesn't address the core challenge of consistently enforcing policies across dynamic cloud infrastructure.
• D contradicts the premise entirely; software-defined environments embrace abstraction and automation, and reverting to traditional VMs adds operational complexity rather than reducing risk.

Memory tip: Think "IaC = policy as code" - if your infrastructure lives in code, your security controls must too. Any gap in the templates is a gap in your compliance posture.

No community discussion yet for this question.