A software company uses a public cloud service for hosting software development and deployment services. The company is concerned that software code in development might leak to competitors and result in the loss of intellectual property. Which security coding techniques can the company implement to address the concern?

A software company uses a public cloud service for hosting software development and deployment services. The company is concerned that software code in development might leak to competitors and result in the loss of intellectual property. Which security coding techniques can the company implement to address the concern?

• A. Use an advanced encryption algorithm
• B. Obfuscation
• C. Implement a multi-factor authentication process
• D. Camouflage

Answer: (C)

The main idea is strengthening access controls for the cloud-based development environment to protect intellectual property. Requiring multi-factor authentication means users must provide two or more forms of verification before gaining access to code repositories, build systems, and cloud resources. Even if credentials are compromised, the attacker would still need the second factor, greatly reducing the chance of unauthorized code access and exfiltration. Encryption protects data, but it doesn’t prevent misuse by someone who has legitimate access; obfuscation and camouflage aren’t as effective for preventing leaks during development. So, a strong MFA implementation directly reduces the risk of IP loss by blocking unauthorized access to the development environment.

The main idea is strengthening access controls for the cloud-based development environment to protect intellectual property. Requiring multi-factor authentication means users must provide two or more forms of verification before gaining access to code repositories, build systems, and cloud resources. Even if credentials are compromised, the attacker would still need the second factor, greatly reducing the chance of unauthorized code access and exfiltration. Encryption protects data, but it doesn’t prevent misuse by someone who has legitimate access; obfuscation and camouflage aren’t as effective for preventing leaks during development. So, a strong MFA implementation directly reduces the risk of IP loss by blocking unauthorized access to the development environment.