Microsoft Security, Compliance, and Identity Fundamentals (SC-900)Describe the capabilities of Microsoft Security solutionsHard
A financial institution needs to monitor and control how sensitive data is used within sanctioned and unsanctioned cloud applications (SaaS, PaaS, IaaS) to prevent data loss and ensure compliance. They require visibility into user activities, data governance, and threat protection across these cloud services. Which Microsoft security solution is designed for this Cloud Access Security Broker (CASB) functionality?
- AMicrosoft Purview Information Protection
- BMicrosoft Defender for Cloud
- CMicrosoft Defender for Cloud Apps
- DMicrosoft Sentinel
Show answer & explanationAnswer & explanation
Correct answer: C. Microsoft Defender for Cloud Apps
Microsoft Defender for Cloud Apps (formerly Microsoft Cloud App Security) is a Cloud Access Security Broker (CASB) that provides deep visibility, control over data travel, and sophisticated analytics to identify and combat cyberthreats across all your cloud services.
Why the other options are wrong
- A. Microsoft Purview Information Protection focuses on classifying, labeling, and protecting sensitive data itself, not CASB functionality across cloud apps.
- B. Microsoft Defender for Cloud focuses on security posture and threat protection for Azure/hybrid infrastructure, not CASB for SaaS applications and data governance within them.
- D. Microsoft Sentinel is a SIEM/SOAR solution for log aggregation and incident management, not primarily a CASB.
Microsoft Defender for Cloud Apps (CASB)
A Cloud Access Security Broker (CASB) that provides visibility, control, and threat protection across sanctioned and unsanctioned cloud applications, preventing data loss and ensuring compliance.
- Cloud Access Security Broker (CASB)
- Discovers and controls sanctioned/unsanctioned apps
- Data loss prevention (DLP) for cloud apps
- Threat protection for cloud apps
Memory trick: Defender for Cloud Apps is your cloud's security guard for all apps.