Certified Cloud Security Professional (CCSP) — Question 394

Which of the following would be considered an example of insufficient due diligence leading to security or operational problems when moving to a cloud?

Answer options

• A. Monitoring
• B. Use of a remote key management system
• C. Programming languages used
• D. Reliance on physical network controls

Correct answer: D

Explanation

The correct answer is D because relying solely on physical network controls in a cloud environment can lead to significant security vulnerabilities. Options A, B, and C do not represent a lack of due diligence; instead, they reflect proactive measures that can enhance security and operational efficiency in the cloud.