When analyzing cloud findings for misconfigurations, which of the following would be considered a high-risk practice that should be flagged for…

Option A: NSGs are an effective way to control network access to resources. Limiting traffic to trusted

IPs reduces the attack surface and is a good security practice.

Option B: Port 22 is typically used for SSH access. Allowing unrestricted inbound traffic to this port

exposes cloud-hosted resources to brute-force attacks and unauthorized access. This is a high-risk practice

and a common misconfiguration that should be remediated by limiting access to trusted IPs or using

VPNs.

Option C: RBAC is a best practice for managing permissions in the cloud. It ensures that users have

access only to the resources they need, reducing the risk of over-privileged accounts. This is not a high-

risk practice.

Option D: MFA is a critical security control that protects against unauthorized access, even if credentials

are compromised. Enforcing MFA is a recommended practice, not a high-risk one.