During an audit of your organization's CrowdStrike Identity Analyzer configuration, you find several policies related to cloud service access. Which…

Option A: Denying access to sensitive resources for unauthorized roles enhances security and ensures

that users cannot access resources they are not entitled to.

Option B: Read-only access aligns with least privilege, ensuring analysts can view data without

modifying it. This is a correctly configured policy.

76/192

Option C: This misconfiguration grants excessive privileges to all users, violating the principle of least

privilege and increasing the risk of accidental or intentional misuse. Access to production environments

should be tightly controlled and limited to specific, authorized roles.

Option D: Granting developers permissions tailored to their role in a non-production environment aligns

with best practices and does not pose a security risk.