CompTIA Cloud+ Practice Test

Which resources should be hardened as part of a change management process in a cloud environment?

1. Web servers running on a fleet of VMs

2. Self-hosted MySQL server

3. Managed elastic filesystem

4. Linux virtual snapshot image

The correct answer is: Self-hosted MySQL server

In the context of a cloud environment, the process of hardening involves applying security measures to protect resources from vulnerabilities. The correct choice is a self-hosted MySQL server, primarily because it is an instance where the organization has full control over the configuration, security settings, and access management. By hardening a self-hosted MySQL server, administrators can implement various security practices such as restricting access to the database, employing strong authentication methods, regularly updating the software to patch vulnerabilities, and configuring firewalls to protect against unauthorized access. These practices are critical, especially for databases that store sensitive information. While web servers and virtual machines should also be secured, they may often rely on shared responsibilities and additional layers of security provided by the platform itself. Managed services, like a managed elastic filesystem, typically come with built-in security measures from the provider, reducing the need for extensive hardening by the user. A Linux virtual snapshot image may not require hardening in the same way since it is a static point-in-time copy and not a running resource that is actively exposed to threats. Overall, focusing on the self-hosted MySQL server as a target for hardening is vital for enhancing the security posture of the cloud environment given its role in managing