Palo Alto Networks Certified Cloud Security Engineer (PCCSE)Cloud Infrastructure Entitlement Management (CIEM)Medium
A cloud security engineer needs to establish a robust process for continuously validating that all identities in their AWS and Azure environments adhere to the principle of least privilege and that no new privilege escalation paths have emerged. What CIEM feature or process best addresses this ongoing requirement?
- APeriodic Identity Lifecycle Review
- BContinuous Identity Posture Validation
- COne-time IAM Audit Report Generation
- DReactive Anomaly Detection
Show answer & explanationAnswer & explanation
Correct answer: B. Continuous Identity Posture Validation
Continuous Identity Posture Validation involves ongoing, automated assessment of identity configurations and permissions against defined policies and best practices to ensure least privilege and detect new risks as the environment evolves.
Why the other options are wrong
- A. Periodic reviews are less frequent and less comprehensive than continuous validation.
- C. A one-time report provides a snapshot, not continuous validation.
- D. Reactive anomaly detection responds to unusual activity, but doesn't proactively validate the overall posture.
Continuous Identity Posture Validation
The ongoing, automated process of assessing and validating the security configuration, permissions, and behavior of all identities against security policies and best practices in a cloud environment.
- Ensures compliance with least privilege over time.
- Detects drift from desired security state.
- Involves automated scanning and analysis of identity configurations.
Memory trick: Continuous Identity Posture Validation is like a security guard always on patrol, checking every identity's badge and behavior, not just once at the gate.