CCSK · Question #247
Which of the following will not help to detect actual migrations, monitor cloud usage, and any data transfers to the cloud?
The correct answer is D. Data Encryption in transit. Data encryption in transit is a protective control that secures data during transfer but provides no detection, monitoring, or visibility capabilities for cloud migrations or data movement.
Question
Which of the following will not help to detect actual migrations, monitor cloud usage, and any data transfers to the cloud?
Options
- ACASB - Cloud Access and Security Brokers
- BURL Filtering
- CDLP- Data Loss Prevention
- DData Encryption in transit
How the community answered
(24 responses)- A4% (1)
- B8% (2)
- C4% (1)
- D83% (20)
Why each option
Data encryption in transit is a protective control that secures data during transfer but provides no detection, monitoring, or visibility capabilities for cloud migrations or data movement.
CASB solutions sit between users and cloud services to provide visibility, detect unauthorized cloud usage, and monitor data transfers to the cloud.
URL filtering can detect and log requests to known cloud service domains, providing visibility into which cloud platforms employees are accessing.
DLP solutions inspect data in motion and can detect sensitive data being transferred to cloud destinations, generating alerts and reports.
Data encryption in transit scrambles data as it moves across a network to prevent interception, but it does not log, alert on, or report cloud activity. It has no ability to detect shadow IT migrations, track which cloud services are being used, or identify what data is being transferred - those require visibility-oriented controls, not cryptographic ones.
Concept tested: Cloud visibility controls vs. data protection controls
Source: https://learn.microsoft.com/en-us/defender-cloud-apps/what-is-defender-for-cloud-apps
Topics
Community Discussion
No community discussion yet for this question.