CCSP Question #167: Real Exam Question with Answer & Explanation

Question

Of the following, which is probably the most significant risk in a managed cloud environment?

Options

• ADDoS
• BManagement plane breach
• CGuest escape
• DPhysical attack on the utility service lines

Explanation

In a managed cloud environment, a breach of the management plane, which controls all cloud resources and services, represents the most significant risk due to its potential for widespread compromise and control over the entire cloud infrastructure.

Common mistakes.

• A. DDoS attacks can disrupt service availability but typically do not lead to data compromise or full control over the cloud infrastructure in the way a management plane breach can.
• C. Guest escape, while a serious hypervisor vulnerability, is typically more limited in scope to the specific host or tenant where the escape occurs, whereas a management plane breach affects the entire cloud account or tenancy.
• D. A physical attack on utility service lines, while disruptive, is a general infrastructure risk not unique to a managed cloud environment and is usually handled by the cloud provider's physical security and redundancy measures, and is less likely to compromise data confidentiality directly.

Concept tested. Cloud management plane security risks

Reference. https://learn.microsoft.com/en-us/security/benchmark/azure/security-control-management-of-privileged-access

No community discussion yet for this question.