CompTIA SecurityX (CAS-005)Security ArchitectureMedium
A security architect is designing a system for a large enterprise that uses a hybrid cloud environment. The enterprise needs to ensure consistent security policy enforcement, centralized visibility, and automated remediation for misconfigurations across both on-premises infrastructure and multiple public cloud providers. Which solution category is BEST suited to address these challenges?
- AEndpoint Detection and Response (EDR) solution.
- BNetwork Intrusion Prevention System (NIPS).
- CTraditional Security Information and Event Management (SIEM).
- DCloud Security Posture Management (CSPM).
Show answer & explanationAnswer & explanation
Correct answer: D. Cloud Security Posture Management (CSPM).
Cloud Security Posture Management (CSPM) tools are specifically designed to continuously monitor and enforce security policies, identify misconfigurations, and provide visibility across multi-cloud and hybrid environments. They offer automated remediation capabilities for cloud-specific security issues.
Why the other options are wrong
- A. EDR solutions focus on endpoint security (laptops, servers) and threat detection/response on those devices, not on overall cloud or hybrid infrastructure posture management.
- B. NIPS focuses on network-based threat prevention at the perimeter, not on identifying and remediating misconfigurations within cloud services or on-premises infrastructure.
- C. While a SIEM collects logs from various sources, it is primarily for threat detection and incident response, not for proactive posture management, misconfiguration detection, or automated remediation across hybrid clouds.
Cloud Security Posture Management (CSPM)
Cloud Security Posture Management (CSPM) solutions continuously monitor cloud environments for misconfigurations, compliance violations, and security risks. They provide visibility across multi-cloud and hybrid infrastructures and often offer automated remediation capabilities.
- Identifies security misconfigurations in cloud services.
- Ensures compliance with industry standards and regulations.
- Provides continuous monitoring and risk assessment.
- Offers automated remediation and policy enforcement across hybrid/multi-cloud.
Memory trick: CSPM patrols the cloud, fixing misfits with a click.