Which two are attack vectors protected by Cloud App Security? (Choose two)

Question

Options

• ACloud apps
• BVoicemail
• CMobile
• DCampus and Branch
• EEndpoints

• A
  92% (35)
• C
  5% (2)
• D
  3% (1)

Explanation

Cloud App Security is purpose-built to protect threats delivered through cloud-based services, which is why Cloud apps (A) is correct - it directly targets SaaS platforms and cloud-hosted services. Voicemail (B) is correct because cloud-based voicemail systems (e.g., Microsoft 365 voicemail, Google Voice) are cloud applications and fall within the product's scope of cloud communication services.

Why the distractors are wrong:

• C (Mobile): Mobile device threats are handled by dedicated MDM/mobile security solutions, not Cloud App Security.
• D (Campus and Branch): This is a network-layer concern addressed by firewalls, SD-WAN, and network security platforms.
• E (Endpoints): Endpoint protection is handled by EDR/AV solutions (e.g., Cisco Secure Endpoint, Microsoft Defender for Endpoint), not Cloud App Security.

Memory tip: Think "Cloud App Security = anything living in the cloud." If the attack vector is hosted or delivered via a cloud platform - whether it's a SaaS app or a cloud voicemail service - it's in scope. Physical/on-prem vectors (campus, branch, endpoints, mobile devices) belong to other security layers.

No community discussion yet for this question.