A cloud developer resigned from an organization and gave a two-week notice. Within the first week since the developer resigned, a security analyst identifies large volumes of file downloads to the…

Question

Options

• AImplementing a policy to stop cloud developers from sharing passwords
• BPreventing cloud developers from accessing the source code repository
• CUpdating outbound firewall rules to block the cloud developer's IP address
• DBlocking internet access for employees that resign from the organization
• EProhibiting files on the local drive from being transferred to USB drives

• A
  13% (7)
• B
  72% (38)
• C
  4% (2)
• D
  4% (2)
• E
  8% (4)

Explanation

The risk is that a departing developer is exfiltrating source code to their personal laptop. The most direct and effective mitigation is revoking their access to the source code repository immediately upon resignation, which stops the data loss at the source. Option A (password sharing policy) doesn't address an employee using their own credentials. Option C (blocking their IP) is easily circumvented by changing networks. Option D (blocking all internet) is too broad and affects legitimate work. Option E (blocking USB transfers) doesn't prevent the observed behavior of downloading from a repository to a laptop - the data is already leaving the organization's control.

No community discussion yet for this question.