200-201 Question 18
Select 3An organization has recently migrated its web application to a public cloud environment. To improve its security posture, the security team is tasked with implementing measures to protect the application from common threats, such as data breaches and unauthorized access. Which two cloud security measures would be most effective in this scenario?
- A
Enable multi-factor authentication (MFA) for user access to the application.
- B
Deploy a Web Application Firewall (WAF) to monitor and filter HTTP traffic.
- C
Disable encryption on sensitive data to optimize application performance.
- D
Rely exclusively on the default security controls provided by the cloud service provider.
- E
Implement role-based access control (RBAC) to limit user permissions.
Show answer and explanation
Correct answers: A, B, E
Explanation
To enhance the security of a cloud-deployed web application, it is crucial to implement measures that address access control, traffic monitoring, and data protection. Multi-factor authentication (MFA) and role-based access control (RBAC) strengthen access security, while a Web Application Firewall (WAF) protects against web-based threats. These measures, in combination, provide a robust defense against common security risks in cloud environments.
- A. Correct.
Enabling multi-factor authentication (MFA) adds an additional layer of security by requiring users to verify their identity through multiple factors, reducing the risk of unauthorized access.
- B. Correct.
Deploying a Web Application Firewall (WAF) is a recommended security measure to protect the application from web-based attacks, such as SQL injection and cross-site scripting (XSS).
- C. Incorrect.
Disabling encryption on sensitive data significantly increases the risk of data breaches and is not a recommended practice for securing cloud deployments.
- D. Incorrect.
Relying exclusively on the default security controls provided by the cloud service provider can leave the application vulnerable, as additional measures tailored to the specific application are often necessary.
- E. Correct.
Implementing role-based access control (RBAC) ensures that users only have the permissions necessary for their roles, reducing the risk of privilege abuse or accidental misconfigurations.