CompTIA SecurityX (CAS-005)Security ArchitectureMedium
A security architect is designing a system for a large enterprise that uses a hybrid cloud environment. The enterprise needs to ensure consistent security policies, reduce the attack surface, and gain centralized visibility into the security posture of both their on-premises infrastructure and multiple public cloud accounts. Which integrated security approach would best address these requirements?
- AUnified Cloud Security Posture Management (CSPM) and Cloud Workload Protection Platform (CWPP)
- BSeparate Security Tools for Each Environment
- CIsolated Security Operations Centers (SOCs)
- DImplementing only on-premises firewalls
Show answer & explanationAnswer & explanation
Correct answer: A. Unified Cloud Security Posture Management (CSPM) and Cloud Workload Protection Platform (CWPP)
A unified CSPM and CWPP solution provides capabilities to monitor and manage security posture across multi-cloud and on-premises environments, detect threats, and enforce consistent policies, offering centralized visibility and reducing the attack surface in a hybrid cloud setup.
Why the other options are wrong
- B. Separate tools would lead to inconsistent policies, fragmented visibility, and increased operational overhead, failing to meet the 'consistent security policies' and 'centralized visibility' requirements.
- C. Isolated SOCs would exacerbate the problem of fragmented visibility and inconsistent policy enforcement across diverse environments.
- D. Implementing only on-premises firewalls neglects the security needs of the public cloud components of the hybrid environment.
Unified CSPM and CWPP (Cloud Native Application Protection Platform - CNAPP)
An integrated security solution that combines Cloud Security Posture Management (CSPM) for configuration and compliance with Cloud Workload Protection Platform (CWPP) for runtime threat detection and protection across hybrid and multi-cloud environments.
- Provides end-to-end security for applications and infrastructure in cloud environments.
- Offers continuous monitoring, vulnerability management, and threat detection.
- Aims to reduce complexity and provide consistent security policy enforcement across hybrid setups.
Memory trick: CSPM+CWPP: Comprehensive Protection for Cloud and On-Premises.