312-50V12 · Question #211
312-50V12 Question #211: Real Exam Question with Answer & Explanation
The correct answer is A: Use a Cloud Access Security Broker (CASB).. To address the client's need for unified security management across multiple cloud platforms, a Cloud Access Security Broker (CASB) is the best recommendation. It provides consistent policy enforcement, threat response, and visibility for multi-cloud environments.
Question
As a security analyst for SkySecure Inc., you are working with a client that uses a multi-cloud strategy, utilizing services from several cloud providers. The client wants to implement a system that will provide unified security management across all their cloud platforms. They need a solution that allows them to consistently enforce security policies, identify and respond to threats, and maintain visibility of all their cloud resources. Which of the following should you recommend as the best solution?
Options
- AUse a Cloud Access Security Broker (CASB).
- BUse a hardware-based firewall to secure all cloud resources.
- CImplement separate security management tools for each cloud platform.
- DRely on the built-in security features of each cloud platform.
Explanation
To address the client's need for unified security management across multiple cloud platforms, a Cloud Access Security Broker (CASB) is the best recommendation. It provides consistent policy enforcement, threat response, and visibility for multi-cloud environments.
Common mistakes.
- B. Hardware-based firewalls are designed for on-premises network perimeters and are not suitable for securing dynamically provisioned multi-cloud resources or providing unified policy management across distinct cloud environments.
- C. Implementing separate security management tools for each cloud platform would lead to siloed security, increased operational complexity, and a lack of unified visibility and consistent policy enforcement, directly contradicting the client's requirement for unified security.
- D. While built-in security features are important, relying solely on them across multiple cloud platforms would result in inconsistent security postures, fragmented visibility, and complex management, failing to provide unified security management and consistent policy enforcement.
Concept tested. Multi-cloud security management with CASB
Reference. https://learn.microsoft.com/en-us/defender-cloud-apps/what-is-defender-for-cloud-apps
Topics
Community Discussion
No community discussion yet for this question.