Palo Alto Networks Certified Cybersecurity Entry-level Technician (PCCET)Cloud SecurityMedium
A security team is implementing a solution to continuously monitor the security posture of their cloud resources, identify misconfigurations, and ensure compliance with industry standards. What type of cloud security technology would best meet these requirements?
- ACloud Workload Protection Platform (CWPP)
- BCloud Security Posture Management (CSPM)
- CDistributed Denial of Service (DDoS) protection
- DCloud Access Security Broker (CASB)
Show answer & explanationAnswer & explanation
Correct answer: B. Cloud Security Posture Management (CSPM)
Cloud Security Posture Management (CSPM) solutions are specifically designed to continuously monitor cloud environments for misconfigurations, compliance deviations, and security risks, providing visibility and remediation recommendations.
Why the other options are wrong
- A. CWPPs focus on securing workloads (VMs, containers, serverless) but not the overall posture, misconfigurations, and compliance of the cloud environment itself.
- C. DDoS protection mitigates denial-of-service attacks, which is a specific threat, not a comprehensive posture management solution.
- D. CASBs focus on securing access to cloud applications and data, often for SaaS, but not broad posture management of infrastructure.
Cloud Security Posture Management (CSPM)
A cloud security technology that continuously monitors cloud environments for misconfigurations, compliance violations, and security risks, providing visibility and automated remediation.
- Identifies security gaps in cloud infrastructure.
- Ensures compliance with regulatory standards.
- Automates remediation of misconfigurations.
Memory trick: CSPM checks your cloud's 'posture' for good 'health' and 'compliance'.