CompTIA CySA+ (CS0-003) — Question 41

A company is concerned with finding sensitive file storage locations that are open to the public. The current internal cloud network is flat. Which of the following is the best solution to secure the network?

Answer options

• A. Implement segmentation with ACLs.
• B. Configure logging and monitoring to the SIEM.
• C. Deploy MFA to cloud storage locations.
• D. Roll out an IDS.

Correct answer: A

Explanation

Implementing segmentation with ACLs (Access Control Lists) creates distinct boundaries within the network, limiting access to sensitive files and enhancing security. Options B, C, and D focus on monitoring or additional authentication but do not address the core issue of securing the network through segmentation, which is crucial in a flat network environment.