Cisco CCNP Security Core (SCOR) 350-701Cloud SecurityMedium
A security architect is designing a cloud security solution for a global organization that uses multiple Software-as-a-Service (SaaS) applications, including Salesforce, Microsoft 365, and Dropbox. The organization needs to enforce consistent security policies, monitor user activity, detect anomalous behavior, and prevent data leakage across all these disparate SaaS applications. Which cloud security technology is purpose-built to address these challenges?
- ASecurity Orchestration, Automation, and Response (SOAR)
- BCloud Security Posture Management (CSPM)
- CCloud Access Security Broker (CASB)
- DIdentity and Access Management (IAM)
Show answer & explanationAnswer & explanation
Correct answer: C. Cloud Access Security Broker (CASB)
A Cloud Access Security Broker (CASB) acts as an intermediary between users and cloud service providers, extending on-premises security policies to the cloud for SaaS, PaaS, and IaaS. It is specifically designed to enforce policies, monitor activity, and prevent data leakage across multiple cloud services.
Why the other options are wrong
- A. SOAR automates incident response workflows, which is reactive, not proactive for enforcing policies and preventing data leakage across SaaS applications.
- B. CSPM focuses on misconfigurations and compliance in IaaS/PaaS infrastructure, not primarily on SaaS application security and data leakage prevention.
- D. IAM manages user identities and permissions but doesn't actively monitor data leakage or enforce policies within SaaS application content.
Cloud Access Security Broker (CASB)
A security policy enforcement point placed between cloud service consumers and cloud service providers to combine and interject enterprise security policies as cloud-based resources are accessed.
- Provides visibility into cloud application usage.
- Enforces data security policies (DLP, encryption).
- Detects threats and anomalous behavior in cloud services.
Memory trick: CASB is the 'C'loud 'A'ccess 'S'ecurity 'B'ouncer, watching all your SaaS apps.