CCSP · Question #137
The Cloud Security Alliance (CSA) publishes the Notorious Nine, a list of common threats to organizations participating in cloud computing. According to the CSA, what aspect of managed cloud services
The correct answer is B. Multitenancy. The multitenancy aspect of managed cloud services amplifies the threat of malicious insiders by increasing the potential scope of impact.
Question
The Cloud Security Alliance (CSA) publishes the Notorious Nine, a list of common threats to organizations participating in cloud computing. According to the CSA, what aspect of managed cloud services makes the threat of malicious insiders so alarming?
Options
- AScalability
- BMultitenancy
- CMetered service
- DFlexibility
How the community answered
(14 responses)- B93% (13)
- C7% (1)
Why each option
The multitenancy aspect of managed cloud services amplifies the threat of malicious insiders by increasing the potential scope of impact.
Scalability refers to the ability to expand resources, which doesn't directly exacerbate the malicious insider threat more than other factors.
Multitenancy, where multiple customer organizations share the same underlying physical infrastructure and often logical resources (like hypervisors or storage systems), makes the threat of malicious insiders (e.g., cloud provider employees) particularly alarming. A malicious insider with elevated access in a multitenant environment could potentially access or compromise data belonging to numerous customers.
Metered service refers to pay-per-use billing, which is an economic model, not a security vulnerability increasing insider risk.
Flexibility refers to the adaptability of cloud resources, which is a benefit, not a factor increasing insider threat severity.
Concept tested: Cloud security threats; Multitenancy risks
Source: https://cloudsecurityalliance.org/research/top-threats/
Topics
Community Discussion
No community discussion yet for this question.