350-201 Question 118
Select 3Your organization has recently migrated its workload to a cloud environment. As a cybersecurity engineer, you have been tasked with implementing security controls to protect the cloud infrastructure. Which of the following actions should you take to ensure proper security and compliance in the cloud environment?
- A
Implement a cloud-native firewall to control traffic between resources.
- B
Rely solely on the cloud service provider’s built-in security measures.
- C
Use multi-factor authentication (MFA) for administrative access to cloud resources.
- D
Regularly review and update Identity and Access Management (IAM) roles and policies.
- E
Disable logging features to reduce storage costs.
Show answer and explanation
Correct answers: A, C, D
Explanation
Securing a cloud environment requires implementing controls such as firewalls, multi-factor authentication, and regular updates to IAM roles. While cloud providers offer certain security measures, organizations remain responsible for securing their data, applications, and configurations. Disabling logging undermines visibility, making it harder to detect and respond to threats.
- A. Correct.
Correct. A cloud-native firewall will help control the flow of traffic and protect resources from unauthorized access.
- B. Incorrect.
Incorrect. While cloud service providers have built-in security measures, relying solely on them is insufficient. Organizations are responsible for managing the security of their applications and data in the cloud.
- C. Correct.
Correct. Multi-factor authentication (MFA) adds an additional layer of security to prevent unauthorized access to cloud resources.
- D. Correct.
Correct. Regularly reviewing and updating IAM roles and policies ensures that permissions are appropriately assigned and reduces the risk of privilege misuse.
- E. Incorrect.
Incorrect. Disabling logging features compromises visibility into cloud activity, which is critical for detecting and responding to security incidents.