CV0-004 · Question #84
A cloud architect is preparing environments to develop a new application that will process sensitive data. The project team consists of one internal developer, two external consultants, and three test
The correct answer is B. Segregating environments for internal and external teams. The application will process sensitive data, and the team includes external consultants, so the most important control is strict segregation of what external users can access versus what internal staff can access. Separating environments or accounts for internal and external team
Question
A cloud architect is preparing environments to develop a new application that will process sensitive data. The project team consists of one internal developer, two external consultants, and three testers. Which of the following is the most important security control for the cloud architect to consider implementing?
Options
- ASetting up private development, public development, and testing environments
- BSegregating environments for internal and external teams
- CConfiguring DDoS protection to mitigate the risk of downtime
- DUsing IAM and ACL in order to bolster DLP
How the community answered
(44 responses)- A20% (9)
- B59% (26)
- C14% (6)
- D7% (3)
Explanation
The application will process sensitive data, and the team includes external consultants, so the most important control is strict segregation of what external users can access versus what internal staff can access. Separating environments or accounts for internal and external teams enforces least privilege and reduces the blast radius if an external account is compromised. While DDoS protection and generic IAM/ACL configuration are important, they are secondary to ensuring that external consultants cannot directly access sensitive data or production-like resources, which is achieved by properly segregating internal and external environments.
Topics
Community Discussion
No community discussion yet for this question.