You are using CrowdStrike's Cloud Infrastructure Entitlement Manager (CIEM) to manage access policies in your organization. You want to assign a…

65/192

Option A: Configuring policies directly in the cloud provider's IAM service bypasses CIEM's centralized

management capabilities, reducing visibility and control over entitlements. Synchronization with CIEM is

typically used for monitoring, not primary configuration.

Option B: Deactivating all other policies is not a scalable or secure approach. It can inadvertently disrupt

other users' workflows and does not utilize CIEM's ability to manage entitlements effectively.

Option C: CIEM enables you to define and assign policies targeting specific groups, such as "Finance,"

and map them to roles and permissions for services like cloud storage. This approach ensures policies are

aligned with organizational requirements and avoids over-provisioning.

Option D: While assigning policies at the cloud provider level is possible, it is not the recommended

approach when using CIEM. CIEM provides granular control, allowing you to manage permissions based

on groups or roles rather than applying blanket policies.