A Chief Information Security Officer (CISO) requests the following external hosted services be scanned for malware, unsecured PII, and healthcare data: - Corporate intranet site - Online storage…

A port scanner identifies open network ports and services; it cannot inspect content stored in cloud applications for malware or sensitive data.

A CASB provides visibility and control over cloud applications such as corporate intranets, online storage, and collaboration suites. It can scan cloud-stored content for malware, unsecured PII, and regulated data like PHI, and can detect anomalous activity such as bulk downloads through behavioral analysis - addressing all stated requirements in a single platform.

A DLP agent is installed on endpoints to monitor local data in motion or at rest; it does not have visibility into externally hosted cloud services.

An application sandbox executes unknown code in an isolated environment to detect malware; it is not designed to scan cloud storage or detect bulk data transfers.

A SCAP scanner audits system configurations against compliance benchmarks; it does not scan cloud service content or detect data exfiltration.