CompTIA CySA+ (CS0-003)Vulnerability ManagementHard
A security team is implementing a vulnerability management program for a new cloud environment. They want to ensure that all virtual machines (VMs) and containers are continuously monitored for misconfigurations and known vulnerabilities, including those introduced by new software deployments. Which type of vulnerability scanning is BEST suited for this requirement?
- AExternal Network Scanning
- BContainer Image Scanning
- CCloud Security Posture Management (CSPM)
- DWeb Application Scanning
Show answer & explanationAnswer & explanation
Correct answer: C. Cloud Security Posture Management (CSPM)
Cloud Security Posture Management (CSPM) tools are specifically designed for continuous monitoring of cloud environments. They identify misconfigurations, compliance violations, and often integrate with other tools for vulnerability detection in VMs and containers, making them the best fit for 'continuously monitored for misconfigurations and known vulnerabilities' within a cloud context.
Why the other options are wrong
- A. External network scanning focuses on perimeter vulnerabilities and wouldn't continuously monitor internal VMs/containers or misconfigurations within a cloud environment.
- B. Container image scanning is part of the solution but focuses only on container images, not the runtime configuration of VMs or the overall cloud environment posture.
- D. Web application scanning focuses specifically on web applications, not the underlying VMs, containers, or broader cloud configurations.
Cloud Security Posture Management (CSPM)
Tools that continuously monitor cloud environments for misconfigurations, compliance violations, and security risks across various cloud services (IaaS, PaaS, SaaS).
- Focuses on misconfigurations and compliance in cloud infrastructure.
- Provides continuous monitoring and assessment.
- Often integrates with vulnerability scanning for VMs/containers.
Memory trick: Cloud's security posture needs constant watch, like a hawk over its hatch!