nerdexam
CrowdStrike

CCCS-203B · Question #103

Which of the following is an effective step for identifying cloud vulnerabilities related to improper configuration?

The correct answer is C. Perform regular vulnerability scans with tools that support cloud environments. Option A: Providing all users with administrative access violates the principle of least privilege and significantly increases the risk of accidental or malicious changes to configurations. Option B: Disabling logging impairs visibility into cloud activity, making it difficult to

Cloud Vulnerability Management

Question

Which of the following is an effective step for identifying cloud vulnerabilities related to improper configuration?

Options

  • AGrant all users administrator-level permissions for easier troubleshooting
  • BDisable logging to reduce storage costs and simplify analysis
  • CPerform regular vulnerability scans with tools that support cloud environments
  • DRely on default security settings provided by cloud service providers

How the community answered

(38 responses)
  • A
    3% (1)
  • B
    5% (2)
  • C
    89% (34)
  • D
    3% (1)

Explanation

Option A: Providing all users with administrative access violates the principle of least privilege and significantly increases the risk of accidental or malicious changes to configurations. Option B: Disabling logging impairs visibility into cloud activity, making it difficult to detect suspicious behavior or troubleshoot issues. Logging is a vital security measure, not a cost-saving Option C: Regular vulnerability scans using tools designed for cloud environments help identify misconfigurations, missing patches, and other vulnerabilities. These scans are essential for proactive risk management and are a critical component of a cloud security strategy. Option D: Default settings often prioritize functionality over security and may not meet specific organizational requirements. Relying on them increases the risk of vulnerabilities.

Topics

#vulnerability scanning#cloud misconfiguration#security assessment#cloud best practices

Community Discussion

No community discussion yet for this question.

Full CCCS-203B Practice