Exam CCSP topic 1 question 226 discussion

Take note the keyword in the question is: “infrastructure” Interpretation of "Infrastructure" In cloud computing, infrastructure typically refers to: - Compute (VMs) - Storage - Network - Underlying virtualization (including the hypervisor) The management plane, although essential, is sometimes classified more under platform/service control layers, especially in SaaS/PaaS/IaaS models — not always as core “infrastructure.” since it specifies "infrastructure", the hypervisor is more accurately part of that.

The management plane is the central control point for orchestrating and administering the entire cloud environment. If it’s compromised, an attacker gains full administrative access to resources and services, making it a prime target from a security perspective. While components like the hypervisor are critical too, cloud providers often invest heavily in their hardening, whereas vulnerabilities in the management plane can have broader and more devastating consequences.

A. Hypervisor

B. Management plane

I answered B as well, but Hypervisor & Encryption could definitely be answers too ... Lame question.

Management plane is usually accessed from a jump box/bastion. Encryption requires usually a few components, making it susceptible to greater threats.

B. Management plane

This is the major internal threat at side of the cloud provider, but impacting all cloud customers.