Countermeasures for protecting cloud operations against internal threats include all of the following except:

The correct answer is D. Conflict of interest. Mandatory vacation, least privilege, and separation of duties are all established insider-threat countermeasures. Mandatory vacation forces employees to be away, which can expose fraud that requires ongoing presence. Least privilege limits access to only what is needed. Separatio

Submitted by yousef_jo· Apr 18, 2026Cloud Security Operations

Question

Options

AMandatory vacation
BLeast privilege
CSeparation of duties
DConflict of interest

How the community answered

(25 responses)

B
4% (1)
C
4% (1)
D
92% (23)

Explanation

Mandatory vacation, least privilege, and separation of duties are all established insider-threat countermeasures. Mandatory vacation forces employees to be away, which can expose fraud that requires ongoing presence. Least privilege limits access to only what is needed. Separation of duties requires multiple people to complete sensitive tasks. 'Conflict of interest' is itself a risk or policy violation to be avoided - it is not a countermeasure. Organizations implement controls to prevent conflicts of interest, but a conflict of interest is not a protective measure.

Topics

#Internal threats#Security controls#Personnel security#Cloud security operations

Community Discussion

No community discussion yet for this question.

Full CCSP Practice