nerdexam
CSA

CCSK · Question #247

Which of the following will not help to detect actual migrations, monitor cloud usage, and any data transfers to the cloud?

The correct answer is D. Data Encryption in transit. Data encryption in transit is a protective control that secures data during transfer but provides no detection, monitoring, or visibility capabilities for cloud migrations or data movement.

Cloud Security Operations

Question

Which of the following will not help to detect actual migrations, monitor cloud usage, and any data transfers to the cloud?

Options

  • ACASB - Cloud Access and Security Brokers
  • BURL Filtering
  • CDLP- Data Loss Prevention
  • DData Encryption in transit

How the community answered

(24 responses)
  • A
    4% (1)
  • B
    8% (2)
  • C
    4% (1)
  • D
    83% (20)

Why each option

Data encryption in transit is a protective control that secures data during transfer but provides no detection, monitoring, or visibility capabilities for cloud migrations or data movement.

ACASB - Cloud Access and Security Brokers

CASB solutions sit between users and cloud services to provide visibility, detect unauthorized cloud usage, and monitor data transfers to the cloud.

BURL Filtering

URL filtering can detect and log requests to known cloud service domains, providing visibility into which cloud platforms employees are accessing.

CDLP- Data Loss Prevention

DLP solutions inspect data in motion and can detect sensitive data being transferred to cloud destinations, generating alerts and reports.

DData Encryption in transitCorrect

Data encryption in transit scrambles data as it moves across a network to prevent interception, but it does not log, alert on, or report cloud activity. It has no ability to detect shadow IT migrations, track which cloud services are being used, or identify what data is being transferred - those require visibility-oriented controls, not cryptographic ones.

Concept tested: Cloud visibility controls vs. data protection controls

Source: https://learn.microsoft.com/en-us/defender-cloud-apps/what-is-defender-for-cloud-apps

Topics

#CASB#cloud usage monitoring#shadow IT detection#data transfer monitoring

Community Discussion

No community discussion yet for this question.

Full CCSK Practice