Certified Cloud Security Professional (CCSP)Cloud Data SecurityMedium
A global healthcare provider is deploying a new cloud-based electronic health record (EHR) system. Due to the highly sensitive nature of patient data and strict regulatory requirements (e.g., HIPAA, GDPR), the provider requires a solution that continuously monitors data access, identifies unusual behavior, and enforces granular access policies in real-time across multiple cloud services. Which cloud security technology is best suited to fulfill these requirements?
- ACloud Workload Protection Platform (CWPP)
- BData Loss Prevention (DLP)
- CCloud Security Posture Management (CSPM)
- DCloud Access Security Broker (CASB)
Show answer & explanationAnswer & explanation
Correct answer: D. Cloud Access Security Broker (CASB)
A Cloud Access Security Broker (CASB) operates between cloud users and cloud applications, providing visibility, compliance, data security, and threat protection. It's ideal for monitoring access, detecting anomalies, and enforcing granular policies across multiple cloud services, matching the scenario's needs.
Why the other options are wrong
- A. CWPP protects workloads (VMs, containers, functions) from vulnerabilities and attacks, but its primary focus isn't data access monitoring and granular policy enforcement across cloud services.
- B. DLP primarily focuses on preventing sensitive data from leaving defined boundaries, while it can monitor data, its core strength isn't real-time access policy enforcement and anomaly detection across various cloud services in the same way a CASB does.
- C. CSPM focuses on identifying and remediating misconfigurations and compliance violations in cloud infrastructure, not real-time data access monitoring and anomaly detection and policy enforcement for data.
Cloud Access Security Broker (CASB)
A security policy enforcement point placed between cloud service consumers and cloud service providers to combine and interject enterprise security policies as cloud-based resources are accessed. CASBs provide visibility, compliance, data security, and threat protection.
- Intermediary between users and cloud services.
- Provides visibility, compliance, data security, threat protection.
- Enforces policies in real-time across multiple cloud services.
Memory trick: CASB: Control Access, Secure Behavior.