CV0-003 · Question #501
A company has deployed a new cloud solution and is required to meet security compliance. Which of the following will MOST likely be executed in the cloud solution to meet security requirements?
The correct answer is C. Vulnerability testing. Security compliance in cloud environments requires vulnerability testing to identify and remediate security weaknesses before they can be exploited.
Question
A company has deployed a new cloud solution and is required to meet security compliance. Which of the following will MOST likely be executed in the cloud solution to meet security requirements?
Options
- APerformance testing
- BRegression testing
- CVulnerability testing
- DUsability testing
How the community answered
(33 responses)- A3% (1)
- C91% (30)
- D6% (2)
Why each option
Security compliance in cloud environments requires vulnerability testing to identify and remediate security weaknesses before they can be exploited.
Performance testing measures system throughput, latency, and scalability and has no relation to identifying security vulnerabilities or satisfying compliance requirements.
Regression testing verifies that recent code changes have not broken existing functionality, which is a software quality concern entirely unrelated to security compliance.
Vulnerability testing scans cloud infrastructure for security flaws, misconfigurations, and exploitable weaknesses that must be identified to satisfy compliance frameworks such as PCI-DSS, HIPAA, or SOC 2. It is the primary technical control used to validate and demonstrate a security compliance posture. By discovering and remediating vulnerabilities, the organization can demonstrate due diligence to auditors and regulators.
Usability testing evaluates user experience and interface design, which does not address security requirements or compliance mandates.
Concept tested: Vulnerability testing for cloud security compliance
Source: https://learn.microsoft.com/en-us/azure/security/fundamentals/pen-testing
Topics
Community Discussion
No community discussion yet for this question.