CompTIA SecurityX (CAS-005)Security ArchitectureMedium
A global e-commerce company is migrating its entire infrastructure to a multi-cloud environment. The security architect needs to ensure continuous visibility, threat detection, and automated remediation across all cloud accounts and services from different providers. This includes identifying misconfigurations, compliance violations, and suspicious activities. Which security solution is best suited to address these requirements comprehensively?
- ASecurity Information and Event Management (SIEM)
- BDistributed Denial of Service (DDoS) Protection
- CWeb Application Firewall (WAF)
- DCloud Security Posture Management (CSPM)
Show answer & explanationAnswer & explanation
Correct answer: D. Cloud Security Posture Management (CSPM)
Cloud Security Posture Management (CSPM) tools continuously monitor cloud environments for misconfigurations, compliance violations, and security risks, providing continuous visibility and enabling automated remediation across multi-cloud deployments.
Why the other options are wrong
- A. SIEM collects and analyzes security logs and events, but it typically relies on other tools to detect misconfigurations and compliance violations proactively.
- B. DDoS protection mitigates denial-of-service attacks; it does not address misconfigurations, compliance, or broader security posture.
- C. WAF primarily protects web applications from common web-based attacks; it does not provide comprehensive posture management across an entire cloud infrastructure.
Cloud Security Posture Management (CSPM)
Cloud Security Posture Management (CSPM) is a category of security tools that identify misconfigurations and compliance risks in cloud environments. CSPM solutions provide continuous monitoring, automated remediation, and visibility across multi-cloud infrastructure.
- Continuously monitors cloud resources for security misconfigurations.
- Detects deviations from security best practices and compliance standards.
- Provides visibility into cloud asset inventory and security risks.
- Often offers automated remediation capabilities.
Memory trick: CSPM Constantly Secures Posture in Multi-Cloud.