312-50V13 Question #527: Real Exam Question with Answer & Explanation

Question

As a security analyst for Sky Secure Inc., you are working with a client that uses a multi-cloud strategy, utilizing services from several cloud providers. The client wants to implement a system that will provide unified security management across all their cloud platforms. They need a solution that allows them to consistently enforce security policies, identify and respond to threats, and maintain visibility of all their cloud resources. Which of the following should you recommend as the best solution?

Options

• AUse a hardware-based firewall to secure all cloud resources.
• Bimplement separate security management tools for each cloud platform.
• CUse a Cloud Access Security Broker (CASB).
• DRely on the built-in security features of each cloud platform.

Explanation

Cloud Security Management Explanation

A Cloud Access Security Broker (CASB) is purpose-built for exactly this scenario - it acts as a centralized security control point that sits between users and multiple cloud services, enabling unified policy enforcement, threat detection, and visibility across all cloud platforms simultaneously, making it the ideal solution for a multi-cloud environment.

Why the distractors are wrong:

• Option A (Hardware firewall): Hardware firewalls are physical/on-premises solutions and cannot natively extend consistent security management across distributed cloud environments
• Option B (Separate tools per platform): This creates security silos, increases management complexity, and defeats the entire purpose of unified security management the client requires
• Option D (Built-in security features): Each provider's native tools only work within their own ecosystem, providing no cross-platform visibility or consistent policy enforcement

💡 Memory Tip: Think of CASB as a "cloud security traffic cop" - just as one traffic officer can manage multiple intersections using a unified system, a CASB manages security across multiple cloud platforms from a single point. When you see keywords like "multi-cloud," "unified," or "consistent policies across platforms," CASB should immediately come to mind.

No community discussion yet for this question.