CAS-003 · Question #783
A company has decided to move an ERP application to a public cloud vendor. The company wants to replicate some of its global policies from on premises to cloud. The policies include data encryption…
The correct answer is B. CASB. A Cloud Access Security Broker (CASB) is a security policy enforcement point placed between cloud service consumers and cloud providers. It enforces an organization's security policies - including data encryption, token/credential management, and access controls - across cloud…
Question
A company has decided to move an ERP application to a public cloud vendor. The company wants to replicate some of its global policies from on premises to cloud. The policies include data encryption, token management, and limited user access to the ERP application. The Chief Information Officer (CIO) is mainly concerned about privileged accounts that might be compromised and used to alter data in the ERP application. Which of the following is the BEST option to meet the requirements?
Options
- ASandboxing
- BCASB
- CMFA
- DSecurity as a service
How the community answered
(64 responses)- A6% (4)
- B83% (53)
- C9% (6)
- D2% (1)
Explanation
A Cloud Access Security Broker (CASB) is a security policy enforcement point placed between cloud service consumers and cloud providers. It enforces an organization's security policies - including data encryption, token/credential management, and access controls - across cloud services. Critically, CASB can monitor and control privileged account activity in cloud environments, addressing the CIO's concern about compromised privileged accounts altering ERP data. It effectively replicates on-premises governance policies into the cloud. Sandboxing (A) isolates suspicious processes but does not govern cloud access policies. MFA (C) strengthens authentication but alone does not enforce encryption, token management, or access policies comprehensively. Security as a Service (D) is a broad category and not specific enough to address all the stated requirements. CASB is the purpose-built solution for this scenario.
Topics
Community Discussion
No community discussion yet for this question.