Which statement best describes effective cloud security monitoring and governance practices?

• A. Rely solely on long-term retention, ignoring real-time alerts.
• B. Use automated baselines, continuous monitoring, and alerting with dashboards.
• C. Disable alerting to avoid noise.
• D. Monitoring is not needed in production environments.

Answer: (B)

Continuous visibility and automated controls are essential for cloud security monitoring and governance. Automated baselines establish expected configurations and behavior across cloud resources, so deviations can be flagged automatically. This helps you catch misconfigurations and policy violations without relying on manual checks.

Continuous monitoring means collecting and analyzing security-relevant data across identities, networks, workloads, and configurations in near real time. It keeps your risk posture current, enabling rapid detection of anomalies, unauthorized access, or unusual activity as the cloud environment changes.

Alerting paired with dashboards translates that data into timely, actionable insight. Real-time alerts notify the right teams when something important happens, while dashboards provide a consolidated view of the security posture across accounts and services. This supports governance, compliance reporting, and effective incident response.

Relying on long-term retention alone misses the opportunity to detect and respond to threats as they occur. Disabling alerting removes the mechanism for timely action. And skipping monitoring in production leaves you blind to issues that could impact availability, integrity, or compliance.