A company that has several branches worldwide needs to facilitate full access to a specific cloud resource to a branch in Spain. Other branches will have only read access. Which of the following is…

Question

Options

• ASet up MFA for the users working at the branch.
• BCreate a network security group with required permissions for users in Spain.
• CApply a rule on the WAF to allow only users in Spain access to the resource.
• DImplement an IPS/IDS to detect unauthorized users.

• A
  9% (6)
• B
  72% (47)
• C
  15% (10)
• D
  3% (2)

Explanation

Creating a network security group (NSG) with the required permissions for Spain users (Option B) is the correct approach. NSGs allow granular, identity- or group-based access control - users in Spain can be assigned to a group with full permissions, while all other branch users are assigned to a read-only group. This is a standard cloud RBAC (Role-Based Access Control) implementation. Option A (MFA) addresses authentication strength, not authorization or differentiated access levels between branches. Option C (WAF rule for Spain) applies network-layer filtering by geographic IP, but WAFs are not designed to differentiate read vs. full access permissions - that is an authorization concern. Option D (IPS/IDS) is an intrusion detection/prevention system for identifying threats; it does not manage user permissions or access levels.

No community discussion yet for this question.