While editing the cloud security posture policy in Falcon to enhance compliance with industry standards, you notice a rule that detects misconfigured…

Option A: Monitoring alone provides visibility but does not address the root cause or prevent potential

security risks from misconfigured IAM roles.

Option B: Adding a condition that enforces least-privilege policies ensures that IAM roles are configured

to minimize unnecessary permissions. This is a proactive approach to reducing the risk of unauthorized

access while aligning with best practices for identity and access management.

Option C: Auto-remediation by deletion is overly aggressive and may disrupt legitimate operations,

especially in production environments.

Option D: While alerts provide visibility, they do not actively enforce secure configurations. This action

is insufficient for preventing unauthorized access.