Which of the following is the most secure method to authenticate and configure a cloud account integration using the CrowdStrike APIs?

Question

Options

• AConfigure static IP-based allowlisting in the cloud provider for CrowdStrike's API endpoints.
• BUse API keys and rotate them monthly using an automated script.
• CUtilize personal access tokens of an administrator user.
• DLeverage CrowdStrike-generated API client credentials and assign IAM roles with minimal

• A
  4% (2)
• B
  2% (1)
• C
  2% (1)
• D
  91% (41)

Explanation

Option A: Static IP-based allowlisting adds a layer of security but is not sufficient by itself to authenticate or configure cloud accounts. It should be combined with other security measures, like role-based access and API credentials, for robust security. Option B: While rotating API keys monthly is a good practice, relying solely on API keys without role-based access controls or additional IAM configurations is insufficient. Security is enhanced by assigning roles with minimal privileges rather than frequent rotations alone. Option C: Personal access tokens tied to administrator accounts are not recommended for system integrations due to their high level of privilege and lack of automation support. These tokens could pose significant security risks if exposed. Option D: This is the most secure and recommended method. Using CrowdStrike-generated API client credentials ensures a robust authentication mechanism, while assigning IAM roles with minimal privileges adheres to the principle of least privilege. This minimizes the attack surface while ensuring necessary functionality.

No community discussion yet for this question.