Certified Cloud Security Professional (CCSP)Cloud Data SecurityHard
A global enterprise is utilizing a multi-cloud strategy and needs to ensure that sensitive customer data stored in various cloud environments is protected against unauthorized access and modification, regardless of its location. They require a solution that can enforce consistent security policies across different cloud providers and on-premises systems. Which cloud data security technology would be most effective for this purpose?
- ACloud Access Security Broker (CASB)
- BIntrusion Prevention System (IPS)
- CSecurity Information and Event Management (SIEM)
- DNext-Generation Firewall (NGFW)
Show answer & explanationAnswer & explanation
Correct answer: A. Cloud Access Security Broker (CASB)
A Cloud Access Security Broker (CASB) acts as an enforcement point between cloud users and cloud service providers, extending security policies from on-premises infrastructure to the cloud. It is designed to address visibility, data security, threat protection, and compliance across multiple cloud services, making it ideal for consistent policy enforcement in a multi-cloud environment.
Why the other options are wrong
- B. IPS focuses on network-level threat detection and prevention, but does not provide consistent data security policy enforcement across cloud services.
- C. SIEM aggregates and analyzes security logs, but doesn't actively enforce data security policies across cloud services itself.
- D. NGFWs provide advanced network filtering, but their primary focus is network perimeter protection, not data security policy enforcement within cloud services.
Cloud Access Security Broker (CASB)
A security policy enforcement point placed between cloud service consumers and cloud service providers to combine and interject enterprise security policies as the cloud-based resources are accessed.
- Acts as a gatekeeper between users and cloud services.
- Extends on-premises security policies to the cloud.
- Offers visibility, data security, threat protection, and compliance.
- Effective for multi-cloud and SaaS environments.
Memory trick: CASB acts as the cloud's security guard, enforcing rules everywhere.