Exam CCSK All QuestionsBrowse all questions from this exam
Question 74

What is the most significant security difference between traditional infrastructure and cloud computing?

    Correct Answer: A

    The most significant security difference between traditional infrastructure and cloud computing is the management plane. In traditional infrastructure, organizations have direct control over servers, network devices, and other components, managing their security configurations directly. However, in cloud computing, the management plane is abstracted and centralized, controlled by the cloud service provider. This abstraction requires organizations to rely on the security practices and controls provided by the cloud service provider, making it a crucial difference in how security is handled.

Discussion
mootaOption: A

Domain 6: We always have a management plane, the tools and interfaces we use to manage our infrastructure, platforms, and applications, but cloud abstracts and centralizes administrative management of resources. Instead of controlling a data center configuration with boxes and wires, it is now controlled with API calls and web consoles.

SSG786Option: A

Correct A: Security-Guidance Page# 67 "The management plane is the single most significant security difference between traditional infrastructure and cloud computing."

BrainiacOption: A

The most significant security difference between traditional infrastructure and cloud computing is: A. Management plane In traditional infrastructure, organizations have direct control over the entire management plane, including physical servers, network devices, and security configurations. They are responsible for managing and securing the infrastructure themselves. On the other hand, in cloud computing, the management plane is abstracted and provided by the cloud service provider (CSP). The CSP manages the underlying infrastructure, including servers, storage, and network, while the organization focuses on managing their applications and data. This shift in responsibility for the management plane introduces a significant security difference. In traditional infrastructure, organizations have granular control over security configurations, whereas in cloud computing, they rely on the CSP's management and security practices. It becomes crucial for organizations to understand and assess the security controls and practices provided by the CSP to ensure the protection of their applications and data in the cloud.