CompTIA Cloud+ (CV0-004)SecurityMedium
A cloud security engineer needs to implement a solution to continuously monitor the security posture of multiple cloud accounts across different cloud providers. The solution must identify misconfigurations, compliance deviations, and provide recommendations for remediation. Which type of service is best suited for this purpose?
- AData Loss Prevention (DLP)
- BCloud Security Posture Management (CSPM)
- CCloud Access Security Broker (CASB)
- DSecurity Information and Event Management (SIEM)
Show answer & explanationAnswer & explanation
Correct answer: B. Cloud Security Posture Management (CSPM)
Cloud Security Posture Management (CSPM) tools are specifically designed to continuously monitor cloud environments for misconfigurations, compliance violations (e.g., CIS benchmarks, regulatory standards), and security risks. They provide visibility into the security posture and offer remediation guidance across multi-cloud deployments.
Why the other options are wrong
- A. DLP prevents sensitive data from leaving defined boundaries, not for overall cloud security posture management.
- C. CASBs focus on securing access to cloud services, data protection, and threat prevention for SaaS applications.
- D. SIEM collects and analyzes security logs and events, focusing on threat detection, not continuous posture management.
Cloud Security Posture Management (CSPM)
CSPM tools continuously monitor cloud environments for misconfigurations, compliance policy violations, and security risks, providing visibility and remediation guidance.
- Identifies cloud resource misconfigurations.
- Checks compliance against industry standards (e.g., CIS, NIST, GDPR).
- Offers remediation recommendations.
- Provides continuous visibility across multi-cloud environments.
Memory trick: CSPM: 'C'onstantly 'S'ecuring 'P'osture 'M'isconfigurations.