nerdexam
Isaca

CCAK · Question #26

Which of the following is a cloud-native solution designed to counter threats that do not exist within the enterprise?

The correct answer is C. Rule based access control. Rule-based access control (RuBAC) is considered a cloud-native access control method because it uses explicitly defined rules (such as ACLs, firewall rules, and conditional logic) to govern access dynamically. Unlike RBAC, which maps to internal organizational roles, rule-based…

Cloud Security Auditing

Question

Which of the following is a cloud-native solution designed to counter threats that do not exist within the enterprise?

Options

  • APolicy based access control
  • BAttribute based access control
  • CRule based access control
  • DRole based access control

How the community answered

(48 responses)
  • A
    2% (1)
  • B
    6% (3)
  • C
    90% (43)
  • D
    2% (1)

Explanation

Rule-based access control (RuBAC) is considered a cloud-native access control method because it uses explicitly defined rules (such as ACLs, firewall rules, and conditional logic) to govern access dynamically. Unlike RBAC, which maps to internal organizational roles, rule-based access control can be configured to respond to cloud-specific threats that have no equivalent in traditional enterprise environments - such as API-level attacks, multi-tenant access anomalies, or traffic from unknown external IP ranges. It allows cloud administrators to write rules that block or allow access based on contextual conditions that arise uniquely in cloud deployments.

Topics

#Cloud Security#Access Control#Network Security#Threat Mitigation

Community Discussion

No community discussion yet for this question.

Full CCAK Practice