While editing the cloud security posture policy in Falcon to enhance compliance with industry standards, you notice a rule that detects misconfigured IAM roles in your AWS environment. What action…

Question

Options

• ASet the action to "Monitor Only" to track usage of the misconfigured roles.
• BAdd a condition to the rule requiring all IAM roles to use least-privilege policies.
• CEnable auto-remediation to delete all misconfigured IAM roles immediately.
• DSet the action to "Alert" and notify the security operations team.

• A
  26% (10)
• B
  45% (17)
• C
  8% (3)
• D
  21% (8)

Explanation

Option A: Monitoring alone provides visibility but does not address the root cause or prevent potential security risks from misconfigured IAM roles. Option B: Adding a condition that enforces least-privilege policies ensures that IAM roles are configured to minimize unnecessary permissions. This is a proactive approach to reducing the risk of unauthorized access while aligning with best practices for identity and access Option C: Auto-remediation by deletion is overly aggressive and may disrupt legitimate operations, especially in production environments. Option D: While alerts provide visibility, they do not actively enforce secure configurations. This action is insufficient for preventing unauthorized access.

No community discussion yet for this question.