A company is implementing a vulnerability management program and moving from an on- premises environment to a hybrid IaaS cloud environment. Which of the following implications should be considered on

Question

Options

• AThe current scanners should be migrated to the cloud
• BCloud-specific misconfigurations may not be detected by the current scanners
• CExisting vulnerability scanners cannot scan IaaS systems
• DVulnerability scans on cloud environments should be performed from the cloud

• A
  2% (1)
• B
  84% (49)
• C
  9% (5)
• D
  5% (3)

Explanation

Cloud-specific misconfigurations are security issues that arise from improper or inadequate configuration of cloud resources, such as storage buckets, databases, virtual machines, or containers. Cloud-specific misconfigurations may not be detected by the current scanners that are designed for on-premises environments, as they may not have the visibility or access to the cloud resources or the cloud provider's APIs. Therefore, one of the implications that should be considered on the new hybrid environment is that cloud-specific misconfigurations may not be detected by the current scanners.

No community discussion yet for this question.