Palo Alto Networks Certified Cybersecurity Entry-level Technician (PCCET)Cloud SecurityMedium
A company is migrating its on-premises data center to a public cloud environment. They are concerned about maintaining a consistent security policy across both environments and ensuring that sensitive data transmitted between their on-premises network and the cloud is protected. Which cloud security best practice should they prioritize to address these concerns?
- AEstablishing secure network connectivity, such as VPNs or direct connect services, between on-premises and cloud.
- BImplementing a robust Data Loss Prevention (DLP) solution within the cloud environment only.
- CEncrypting all data at rest within the cloud, but not focusing on data in transit.
- DRelying solely on the cloud provider's default security settings for data in transit.
Show answer & explanationAnswer & explanation
Correct answer: A. Establishing secure network connectivity, such as VPNs or direct connect services, between on-premises and cloud.
Establishing secure network connectivity like VPNs or direct connect services is crucial for protecting data in transit between on-premises and cloud environments and for extending consistent security policies across the hybrid boundary.
Why the other options are wrong
- B. DLP is important but focusing it 'within the cloud environment only' neglects the on-premises to cloud transit security.
- C. Encrypting data at rest is essential, but the question also highlights 'data transmitted between' and 'consistent security policy' for which in-transit protection is paramount.
- D. Relying solely on default settings is often insufficient for sensitive data and does not guarantee consistent policy application.
Secure Hybrid Cloud Connectivity
The practice of establishing secure and reliable network connections between on-premises infrastructure and cloud environments, typically using VPNs or dedicated links.
- Ensures data privacy and integrity during transit
- Extends on-premises security controls to the cloud
- Facilitates consistent policy enforcement
Memory trick: Connect your cloud and on-premise securely, like a fortified bridge.