CERTIFIED-IN-CYBERSECURITY · Question #706
Which of the following is a best practice for securing cloud-based services?
The correct answer is A. Regularly reviewing access control policies for cloud-based services. Regularly reviewing access control policies ensures that only authorized users and roles retain appropriate permissions to cloud resources, preventing privilege creep and unauthorized access. Not encrypting cloud data (B) exposes it to breaches since cloud storage is outside…
Question
Which of the following is a best practice for securing cloud-based services?
Options
- ARegularly reviewing access control policies for cloud-based services
- BNot encrypting data stored in the cloud
- CSharing login credentials with colleagues
- DNone of the above
How the community answered
(44 responses)- A91% (40)
- B2% (1)
- C2% (1)
- D5% (2)
Explanation
Regularly reviewing access control policies ensures that only authorized users and roles retain appropriate permissions to cloud resources, preventing privilege creep and unauthorized access. Not encrypting cloud data (B) exposes it to breaches since cloud storage is outside the organization's physical control. Sharing login credentials (C) violates accountability and least-privilege principles. Defense-in-depth for cloud includes encryption, MFA, access reviews, and logging.
Topics
Community Discussion
No community discussion yet for this question.