Which of the following is an effective step for identifying cloud vulnerabilities related to improper configuration?

Option A: Providing all users with administrative access violates the principle of least privilege and

significantly increases the risk of accidental or malicious changes to configurations.

Option B: Disabling logging impairs visibility into cloud activity, making it difficult to detect suspicious

behavior or troubleshoot issues. Logging is a vital security measure, not a cost-saving compromise.

Option C: Regular vulnerability scans using tools designed for cloud environments help identify

misconfigurations, missing patches, and other vulnerabilities. These scans are essential for proactive risk

management and are a critical component of a cloud security strategy.

Option D: Default settings often prioritize functionality over security and may not meet specific

organizational requirements. Relying on them increases the risk of vulnerabilities.