CAS-003 · Question #640
A creative services firm has a limited security budget and staff. Due to its business model, the company sends and receives a high volume of files every day through the preferred method defined by…
The correct answer is B. Contract a cloud-based sandbox security service. A cloud-based sandbox security service analyzes files received through any channel-email, SFTP, or cloud providers-by detonating them in an isolated environment to detect malware before delivery. This single solution covers all the company's different file transfer methods…
Question
A creative services firm has a limited security budget and staff. Due to its business model, the company sends and receives a high volume of files every day through the preferred method defined by its customers. These include email, secure file transfers, and various cloud service providers. Which of the following would BEST reduce the risk of malware infection while meeting the company's resource requirements and maintaining its current workflow?
Options
- AConfigure a network-based intrusion prevention system
- BContract a cloud-based sandbox security service.
- CEnable customers to send and receive files via SFTP
- DImplement appropriate DLP systems with strict policies.
How the community answered
(60 responses)- A15% (9)
- B73% (44)
- C8% (5)
- D3% (2)
Explanation
A cloud-based sandbox security service analyzes files received through any channel-email, SFTP, or cloud providers-by detonating them in an isolated environment to detect malware before delivery. This single solution covers all the company's different file transfer methods without requiring significant on-premises infrastructure, fitting the limited security budget and staff. Answer A (network-based IPS) would miss encrypted file transfers and requires on-premises hardware. Answer C (SFTP) only standardizes one delivery method and does not address malware from other channels. Answer D (DLP) is focused on preventing data exfiltration, not on detecting incoming malware. Only a cloud sandbox addresses the multi-channel threat while preserving existing workflows.
Topics
Community Discussion
No community discussion yet for this question.