CompTIA Cloud+ (CV0-004)SecurityMedium
A global e-commerce company uses a multi-cloud strategy and needs to ensure consistent security policies and configurations across all its cloud environments (AWS, Azure, GCP). The security team wants a centralized solution that can enforce security baselines, detect policy violations, and automate remediation tasks across these different platforms. Which approach would be most effective?
- AUtilizing a multi-cloud Cloud Security Posture Management (CSPM) platform.
- BDeveloping custom scripts to audit and remediate configurations in each cloud.
- CDeploying a centralized SIEM to collect logs from all cloud environments.
- DImplementing separate, native security tools for each cloud provider.
Show answer & explanationAnswer & explanation
Correct answer: A. Utilizing a multi-cloud Cloud Security Posture Management (CSPM) platform.
A multi-cloud Cloud Security Posture Management (CSPM) platform is specifically designed to provide a unified view and management of security posture across diverse cloud environments. It can enforce consistent security baselines, detect policy violations, and often automate remediation, making it ideal for the scenario described.
Why the other options are wrong
- B. Custom scripts are error-prone, difficult to maintain, and lack real-time capabilities and comprehensive policy enforcement.
- C. A centralized SIEM focuses on log aggregation and threat detection, not on continuous security posture management and configuration enforcement.
- D. Separate native tools lead to fragmented security management and inconsistency across clouds.
Multi-Cloud CSPM
A Cloud Security Posture Management (CSPM) solution designed to provide unified visibility, compliance monitoring, and security enforcement across multiple public and private cloud environments.
- Centralized security posture visibility for diverse clouds.
- Enforces consistent security policies and baselines.
- Detects misconfigurations and compliance violations.
- Often includes automated remediation capabilities.
- Reduces complexity in multi-cloud security management.
Memory trick: CSPM: 'C'onsistent 'S'ecurity 'P'olicy 'M'anager for all clouds.