CoreQ Academy4.5 Given a scenario, apply security controls in the cloud.
Cloud security controls layer together: protect endpoints and data, filter traffic at several levels, absorb attacks and enforce permissions with policies.
Controls
- Endpoint protection
- EDR or anti-malware agents on cloud VMs and hosts.
- Data loss prevention (DLP)
- Discovers and blocks sensitive data in storage, email or traffic.
- Intrusion prevention system/intrusion detection system (IPS/IDS)
- Detects and optionally blocks malicious traffic, as virtual appliances or managed services.
- Distributed denial-of-service (DDoS) protection
- Provider services that absorb and filter volumetric and application-layer floods.
- Identity and access management (IAM) policies
- JSON or role definitions stating which identities can perform which actions on which resources.
Firewall
- Network access control list (ACL)
- Stateless subnet-level allow/deny rules; return traffic must be explicitly allowed.
- Web application firewall (WAF)
- Inspects HTTP traffic to block attacks such as SQL injection and XSS.
- Network security group
- Stateful instance- or interface-level firewall rules (security groups); return traffic is allowed automatically.
Check your understanding
Loading quiz…
Original CoreQ Academy material, mapped to objective 4.5 of the publicly available CompTIA Cloud+ CV0-004 exam objectives (Exam objectives V4, document version 5.0). Not affiliated with or endorsed by CompTIA. Contains no exam questions.