312-50V12 · Question #211
As a security analyst for SkySecure Inc., you are working with a client that uses a multi-cloud strategy, utilizing services from several cloud providers. The client wants to implement a system that…
The correct answer is A. Use a Cloud Access Security Broker (CASB). To address the client's need for unified security management across multiple cloud platforms, a Cloud Access Security Broker (CASB) is the best recommendation. It provides consistent policy enforcement, threat response, and visibility for multi-cloud environments.
Question
Options
- AUse a Cloud Access Security Broker (CASB).
- BUse a hardware-based firewall to secure all cloud resources.
- CImplement separate security management tools for each cloud platform.
- DRely on the built-in security features of each cloud platform.
How the community answered
(42 responses)- A76% (32)
- B2% (1)
- C14% (6)
- D7% (3)
Why each option
To address the client's need for unified security management across multiple cloud platforms, a Cloud Access Security Broker (CASB) is the best recommendation. It provides consistent policy enforcement, threat response, and visibility for multi-cloud environments.
A CASB acts as an intermediary between users and cloud services, extending security controls across various cloud providers. It offers capabilities such as consistent policy enforcement, data loss prevention (DLP), threat protection, and shadow IT discovery, providing unified visibility and control required for a multi-cloud strategy.
Hardware-based firewalls are designed for on-premises network perimeters and are not suitable for securing dynamically provisioned multi-cloud resources or providing unified policy management across distinct cloud environments.
Implementing separate security management tools for each cloud platform would lead to siloed security, increased operational complexity, and a lack of unified visibility and consistent policy enforcement, directly contradicting the client's requirement for unified security.
While built-in security features are important, relying solely on them across multiple cloud platforms would result in inconsistent security postures, fragmented visibility, and complex management, failing to provide unified security management and consistent policy enforcement.
Concept tested: Multi-cloud security management with CASB
Source: https://learn.microsoft.com/en-us/defender-cloud-apps/what-is-defender-for-cloud-apps
Topics
Community Discussion
No community discussion yet for this question.