Question 430
At the Glenbrook university IT office, an organization cannot see which cloud identities have administrative wildcard permissions across accounts. Which explanation best accounts for the concern?
Explanation
Correct Answer
The problem stems from the fact that distributed cloud control planes hide misconfigurations without central inventory and evaluation. A correct solution would use cloud security posture assessment and risk-based remediation ownership and check that an overprivileged test identity is flagged with its affected resources.
Incorrect Answers
The offered principle is: Different native cloud policy languages can yield inconsistent real security controls. In the source material it is associated with: Different native cloud policy languages can yield inconsistent real security controls. This case has a different controlling cause: Distributed cloud control planes hide misconfigurations without central inventory and evaluation. Its keyed mechanism is: Distributed cloud control planes hide misconfigurations without central inventory and evaluation.
The offered principle is: Shadow SaaS usage bypasses documented data sharing and security requirements. In the source material it is associated with: Shadow SaaS usage bypasses documented data sharing and security requirements. This case has a different controlling cause: Distributed cloud control planes hide misconfigurations without central inventory and evaluation. Its keyed mechanism is: Distributed cloud control planes hide misconfigurations without central inventory and evaluation.
Low-level runtime hooks can affect host security and performance if loaded without governance. That may occur elsewhere, but the evidence at the Glenbrook university IT office instead points to the fact that distributed cloud control planes hide misconfigurations without central inventory and evaluation.