CompTIA SecurityX (CAS-005)Security ArchitectureMedium
A company is migrating its on-premises data center to a hybrid cloud environment. The security architect needs to ensure consistent security policies and visibility across both on-premises and cloud resources. Which of the following approaches BEST addresses this requirement?
- AEstablishing a dedicated VPN tunnel between the on-premises network and the cloud provider.
- BImplementing separate security tools and policies for each environment and manually syncing them.
- CDeploying a cloud access security broker (CASB) to enforce policies for SaaS applications.
- DUtilizing a unified security management platform that integrates with both on-premises and cloud APIs.
Show answer & explanationAnswer & explanation
Correct answer: D. Utilizing a unified security management platform that integrates with both on-premises and cloud APIs.
A unified security management platform provides a single pane of glass to define, deploy, and monitor security policies across diverse environments, including on-premises and multiple cloud providers. This ensures consistency and simplifies management, which is critical in a hybrid cloud scenario.
Why the other options are wrong
- A. A VPN tunnel provides secure connectivity but does not inherently offer consistent security policy management or unified visibility across the connected environments.
- B. Manually syncing separate tools and policies is prone to error, inconsistency, and is not scalable for a complex hybrid environment.
- C. A CASB is primarily focused on SaaS application security and data governance, not comprehensive policy enforcement and visibility across IaaS/PaaS and on-premises infrastructure.
Unified Security Management (USM)
A comprehensive approach to security that integrates multiple security functions, tools, and processes into a single platform for centralized management and visibility across diverse IT environments.
- Provides a single pane of glass for security operations.
- Enables consistent policy enforcement across hybrid environments.
- Integrates with various security tools and platforms.
- Improves visibility and simplifies compliance reporting.
Memory trick: To keep two houses in order, you need one master key.