CompTIA SecurityX (CAS-005)Security ArchitectureEasy
A global e-commerce company is migrating its entire infrastructure to a multi-cloud environment. The security team is concerned about ensuring consistent security configurations, identifying misconfigurations, and detecting non-compliant resources across all cloud providers. They need a solution that can continuously monitor the cloud environments and provide automated remediation suggestions. Which security solution is best suited for this purpose?
- AData Loss Prevention (DLP)
- BCloud Security Posture Management (CSPM)
- CSecurity Information and Event Management (SIEM)
- DCloud Access Security Broker (CASB)
Show answer & explanationAnswer & explanation
Correct answer: B. Cloud Security Posture Management (CSPM)
Cloud Security Posture Management (CSPM) tools are specifically designed to continuously monitor cloud environments for misconfigurations, security risks, and compliance violations, providing automated remediation advice across multi-cloud setups.
Why the other options are wrong
- A. DLP focuses on preventing sensitive data from leaving defined boundaries, which is a different security concern than cloud infrastructure posture.
- C. SIEM aggregates logs and events for threat detection, but its primary focus is not on continuous configuration assessment and compliance of cloud infrastructure.
- D. CASB focuses on securing access to cloud services, identifying shadow IT, and enforcing data policies, not primarily on infrastructure posture management.
Cloud Security Posture Management (CSPM)
A category of security tools that continuously monitor cloud environments for misconfigurations, compliance violations, and security risks, providing visibility and automated remediation.
- Scans cloud infrastructure (IaaS, PaaS) for security gaps.
- Helps enforce security best practices and regulatory compliance.
- Offers continuous assessment and often provides remediation guidance.
Memory trick: CSPM keeps your Cloud's Posture Perfect.