A CTO is tasked with reducing the blast radius of a potential cloud security breach. Which architectural control is most effective?
-
A
Deploying a Web Application Firewall at the perimeter
-
B
Account-level isolation with separate cloud accounts per environment and workload classification
-
C
Encrypting all data at rest with cloud-provider managed keys
-
D
Implementing multi-factor authentication for all developers