When analyzing cloud findings for misconfigurations, which of the following would be considered a high-risk practice that should be flagged for remediation?

Question

Options

• AUsing network security groups (NSGs) to limit traffic to trusted IP addresses
• BAllowing unrestricted inbound traffic to cloud-hosted resources on port 22
• CImplementing role-based access control (RBAC) policies for cloud resources
• DEnforcing multi-factor authentication (MFA) for all cloud administrator accounts

• A
  2% (1)
• B
  89% (51)
• C
  7% (4)
• D
  2% (1)

Explanation

Option A: NSGs are an effective way to control network access to resources. Limiting traffic to trusted IPs reduces the attack surface and is a good security practice. Option B: Port 22 is typically used for SSH access. Allowing unrestricted inbound traffic to this port exposes cloud-hosted resources to brute-force attacks and unauthorized access. This is a high-risk practice and a common misconfiguration that should be remediated by limiting access to trusted IPs or using VPNs. Option C: RBAC is a best practice for managing permissions in the cloud. It ensures that users have access only to the resources they need, reducing the risk of over-privileged accounts. This is not a high-risk practice. Option D: MFA is a critical security control that protects against unauthorized access, even if credentials are compromised. Enforcing MFA is a recommended practice, not a high-risk one.

No community discussion yet for this question.