CCAK · Question #116
Network environments and virtual instances shall be designed and configured to restrict and monitor traffic between trusted and untrusted connections. These configurations shall be reviewed at least…
The correct answer is A. Network Security. The described control - restricting and monitoring traffic between trusted and untrusted connections, annual configuration reviews, and documented justification for all allowed services, protocols, and ports with compensating controls - maps directly to the CSA Cloud Controls…
Question
Network environments and virtual instances shall be designed and configured to restrict and monitor traffic between trusted and untrusted connections. These configurations shall be reviewed at least annually, and supported by a documented justification for use for all allowed services, protocols, ports, and by compensating controls. Which of the following controls BEST matches this control description?
Options
- ANetwork Security
- BChange Detection
- CVirtual Instance and OS Hardening
- DNetwork Vulnerability Management
How the community answered
(40 responses)- A88% (35)
- B3% (1)
- C8% (3)
- D3% (1)
Explanation
The described control - restricting and monitoring traffic between trusted and untrusted connections, annual configuration reviews, and documented justification for all allowed services, protocols, and ports with compensating controls - maps directly to the CSA Cloud Controls Matrix (CCM) Network Security control domain. This is essentially a formal firewall and network segmentation governance requirement. Change Detection (B) focuses on identifying unauthorized modifications to system files or configurations. Virtual Instance and OS Hardening (C) addresses server-level baseline security settings. Network Vulnerability Management (D) covers scanning for and remediating vulnerabilities, not traffic policy governance.
Topics
Community Discussion
No community discussion yet for this question.