When identifying use cases for ECS cluster access control, which applications require stringent data permissions and security measures?

Question

Options

• APublic blogs with general information
• BE-commerce platforms with customer data
• CStatic websites hosting company profiles
• DOnline banking applications

• A
  8% (2)
• B
  77% (20)
• C
  15% (4)

Explanation

E-commerce platforms (B) and online banking applications (D) require stringent ECS cluster access controls because they handle highly sensitive data - customer payment information, personally identifiable information (PII), and financial transaction records - making them prime targets for breaches and subject to strict regulatory compliance (PCI-DSS, SOX, GDPR). A security compromise in either context carries severe legal, financial, and reputational consequences.

Why the distractors are wrong:

• A (Public blogs): Content is intentionally public with no sensitive user data, so minimal access restrictions are needed.
• C (Static websites/company profiles): These serve read-only, publicly available content with no user data collection or transactions requiring protection.

Memory tip: Think "Money & Me" - if an application touches your money (banking) or stores data about me (PII in e-commerce), it demands the tightest security controls. Public-facing informational sites with no user data exchange are the opposite end of the spectrum.

No community discussion yet for this question.