Exam CCSP topic 1 question 226 discussion

Question says "cloud computing infrastructure " I would think it is either Hypervisor (multi tenancy, data bleed, VM escape) or the Encryption. storing keys etc Management plane is more of a concern from insider threat perspective, can be easily secured using MFA and location/IP based controls to prevent external threats.

The management plane is the central control point for orchestrating and administering the entire cloud environment. If it’s compromised, an attacker gains full administrative access to resources and services, making it a prime target from a security perspective. While components like the hypervisor are critical too, cloud providers often invest heavily in their hardening, whereas vulnerabilities in the management plane can have broader and more devastating consequences.

A. Hypervisor

B. Management plane

I answered B as well, but Hypervisor & Encryption could definitely be answers too ... Lame question.

Management plane is usually accessed from a jump box/bastion. Encryption requires usually a few components, making it susceptible to greater threats.

B. Management plane

This is the major internal threat at side of the cloud provider, but impacting all cloud customers.