Which feature discovers and controls malicious cloud apps connected to the corporate environ merit?

Cisco Umbrella provides DNS-layer security and secure web gateway functionality to block malicious domains, but it is not designed specifically as a CASB for discovering and governing cloud app usage.

Cognitive Threat Analytics uses machine learning to detect compromised credentials and insider threats within web traffic, but does not specifically govern cloud app connectivity.

Cisco Cloudlock functions as a CASB, providing visibility into all cloud apps in use (including unsanctioned shadow IT), assessing risk, and allowing administrators to block or restrict malicious or non-compliant cloud applications accessing corporate data.

Cisco Investigate (formerly OpenDNS Investigate) is a threat intelligence and research tool for investigating domains and IPs, not a solution for cloud app control.