hard20 pts · first answer countscloud-securitycloud-governancedefence-in-depth

Preventive vs detective controls

Your organization blocks public S3 buckets with an SCP and Block Public Access, and also runs a Config rule that flags public buckets. Why keep both?

A.Config rules are required before SCPs can be attachedB.SCPs only work if a Config rule is also deployedC.There is no reason; the Config rule is fully redundantD.Detective controls catch gaps and exceptions the preventive ones miss

Discussion 0

Join free to post in the discussion.

Preventive vs detective controls

Discussion 0

Related questions