350-201 Question 119
Select 3A company is transitioning its on-premises workloads to the cloud. As a cybersecurity expert, you are tasked with implementing security measures for the new cloud environment. Which of the following actions should you take to ensure secure access to cloud resources?
- A
Implement multi-factor authentication (MFA) for all user accounts accessing the cloud resources.
- B
Use a flat network design to simplify communication between on-premises and cloud systems.
- C
Configure role-based access control (RBAC) to limit user permissions to only what is necessary.
- D
Store API keys for cloud services in plaintext files for easy accessibility.
- E
Enable logging and monitoring for all cloud activities for better visibility.
- F
Disable encryption for data in transit to improve performance of cloud applications.
Show answer and explanation
Correct answers: A, C, E
Explanation
Securing cloud resources requires implementing best practices such as MFA, RBAC, and logging/monitoring. These measures help prevent unauthorized access, limit user permissions, and improve visibility into cloud activities. Storing sensitive information like API keys improperly or disabling encryption significantly increases security risks and should always be avoided.
- A. Correct.
Implementing MFA adds an additional layer of security to user accounts, making it harder for attackers to gain unauthorized access.
- B. Incorrect.
Using a flat network design increases the risk of lateral movement and reduces overall security, making this approach unsuitable.
- C. Correct.
RBAC ensures that users only have the permissions they need to perform their tasks, reducing the risk of privilege escalation or unauthorized actions.
- D. Incorrect.
Storing API keys in plaintext is highly insecure and can lead to credential leaks or unauthorized access to cloud services.
- E. Correct.
Enabling logging and monitoring provides visibility into cloud activities, helping detect and respond to security incidents more effectively.
- F. Incorrect.
Disabling encryption for data in transit exposes sensitive data to interception and compromises the confidentiality of communications.