Eccouncil Exam 312-40 Topic 11 Question 2 Discussion

Actual exam question for Eccouncil's 312-40 exam

Question #: 2
Topic #: 11

FinTech Inc. is an IT company that utilizes a cloud platform to run its IT infrastructure. Employees belonging to various departments do not implement the rules and regulations framed by the IT department, which leads to fragmented control and breaches that affect the efficiency of cloud services. How can the organization effectively overcome shadow IT and unwarranted usage of cloud resources in this scenario?

ABy implementing cloud risk management

BBy implementing cloud governance

CBy implementing regulatory compliance

DBy implementing corporate compliance

Show Suggested Answer

Suggested Answer: B

To effectively overcome shadow IT and unwarranted usage of cloud resources at FinTech Inc., the organization should implement cloud governance.

1.Cloud Governance Defined: Cloud governance is a set of rules and policies that govern the use of cloud resources. It ensures that the IT infrastructure is used in a way that aligns with the company's strategic goals, compliance requirements, and security standards1.

1.Addressing Shadow IT:

oPolicy Creation: Establish clear policies regarding the use of cloud services and the procurement of IT resources.

oEnforcement Mechanisms: Implement controls to enforce these policies, such as requiring approval for new cloud services or software.

oEducation and Training: Educate employees about the risks associated with shadow IT and the importance of following IT department rules.

oMonitoring and Reporting: Use tools to monitor cloud usage and report on compliance with governance policies.

1.Benefits of Cloud Governance:

oControl and Visibility: Provides better control over IT resources and visibility into how they are being used.

oCost Management: Helps prevent unnecessary spending on unapproved cloud services.

oSecurity and Compliance: Ensures that cloud services are used in a secure and compliant manner, reducing the risk of breaches.

Microsoft Learn: Discover and manage Shadow IT1.

CrowdStrike: What is Shadow IT? Defining Risks & Benefits2.

Microsoft Security Blog: Top 10 actions to secure your environment3.

SC Magazine: Stop chasing shadow IT: Tackle the root causes of cloud breaches4.

by Carole at May 30, 2024, 09:52 PM

Limited Time Offer

25%

Off

Get Premium 312-40 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Cassi

5 months ago

B) By implementing cloud governance sounds like the most comprehensive solution. Gotta keep those IT folks on a tight leash, am I right? *wink*

upvoted 0 times

Tiera

5 months ago

B) By implementing cloud governance sounds like the most comprehensive solution. Gotta keep those IT folks on a tight leash, am I right? *wink*

upvoted 0 times

...

Candra

5 months ago

A) By implementing cloud risk management

upvoted 0 times

...

Genevive

5 months ago

Hmm, I'm not sure. Maybe C) By implementing regulatory compliance would be better. That way, they can ensure they're following all the legal requirements too.

upvoted 0 times

Lashaunda

4 months ago

D) By implementing corporate compliance

upvoted 0 times

...

Haydee

4 months ago

That sounds like a good idea. It's important to make sure they're following all the legal requirements.

upvoted 0 times

...

Tambra

5 months ago

C) By implementing regulatory compliance

upvoted 0 times

...

Lorrie

5 months ago

B) By implementing cloud governance

upvoted 0 times

...

Trinidad

5 months ago

A) By implementing cloud risk management

upvoted 0 times

...

Shenika

5 months ago

I agree with B. Cloud governance is the way to go. IT departments need to work closely with other departments to ensure everyone follows the rules.

upvoted 0 times

Emeline

4 months ago

C) By implementing regulatory compliance

upvoted 0 times

...

Margarita

4 months ago

B) By implementing cloud governance

upvoted 0 times

...

Erick

4 months ago

A) By implementing cloud risk management

upvoted 0 times

...

Alica

5 months ago

I agree with Garry. Cloud governance can help ensure proper usage of cloud resources.

upvoted 0 times

...

Garry

6 months ago

I think the organization should implement cloud governance.

upvoted 0 times

...

Noel

6 months ago

The correct answer is B) By implementing cloud governance. This will help the organization establish clear policies and control over the usage of cloud resources, preventing shadow IT and unwarranted usage.

upvoted 0 times