Option A: Disabling logging and monitoring violates HIPAA compliance and makes it impossible to

detect security incidents. Cloud security requires continuous monitoring, audit logging, and alerting to

ensure compliance and threat mitigation.

Option B: Adaptive security rules using behavioral analytics and threat intelligence allow for proactive

threat detection and dynamic policy enforcement, ensuring both security and compliance. This method

74/192

prevents anomalies and unauthorized access without disrupting legitimate operations.

Option C: Default security group settings from cloud providers are often overly permissive. These must

be hardened with least privilege rules to prevent unauthorized access and data exposure.

Option D: An allow-all policy is a major security risk as it removes all access controls, making cloud

resources vulnerable to unauthorized access and potential data breaches, violating HIPAA compliance.