nerdexam
CrowdStrike

CCCS-203B · Question #189

Your organization is onboarding a new multi-cloud environment with AWS, Azure, and Google Cloud. The security team wants to ensure that all cloud accounts are registered efficiently while…

The correct answer is D. Use API-based bulk registration with role-based access controls (RBAC). Option A: Manually registering each cloud account separately is inefficient, especially in multi- cloud environments. This method does not scale well and is prone to human error, increasing the risk of misconfigurations. Option B: Allowing users to self-register through an open…

Cloud Account Registration and Management

Question

Your organization is onboarding a new multi-cloud environment with AWS, Azure, and Google Cloud. The security team wants to ensure that all cloud accounts are registered efficiently while maintaining strong security controls. Which of the following methods is the most secure and efficient approach for registering cloud accounts in this scenario?

Options

  • AManually register each cloud account separately in the CrowdStrike Falcon platform.
  • BAllow users to self-register their cloud accounts using an open registration link.
  • CLeverage single sign-on (SSO) integration with multi-factor authentication (MFA) for automatic
  • DUse API-based bulk registration with role-based access controls (RBAC).

How the community answered

(29 responses)
  • A
    3% (1)
  • B
    7% (2)
  • C
    14% (4)
  • D
    76% (22)

Explanation

Option A: Manually registering each cloud account separately is inefficient, especially in multi- cloud environments. This method does not scale well and is prone to human error, increasing the risk of misconfigurations. Option B: Allowing users to self-register through an open registration link poses significant security risks. It can lead to unauthorized access and increases the attack surface, making the environment susceptible to account takeovers. Option C: While SSO with MFA enhances authentication security, it is not specifically designed for cloud account registration. It may be useful for user authentication but does not provide the automation and scalability required for efficient multi-cloud registration. Option D: Using API-based bulk registration with RBAC ensures a secure and automated process, reducing manual effort and enforcing least privilege access. RBAC allows for fine- grained permissions, ensuring only authorized entities can register cloud accounts.

Topics

#multi-cloud registration#API-based bulk registration#RBAC#cloud account management

Community Discussion

No community discussion yet for this question.

Full CCCS-203B Practice