CISA · Question #375
Which of the following is the MOST effective control for discovering unauthorized cloud service usage in a corporate network?
The correct answer is A. Reviewing firewall logs. Firewall logs record all inbound and outbound network traffic, including connections to external cloud service endpoints. This makes them the most comprehensive and proactive tool for detecting unauthorized cloud usage (shadow IT) in real time. Reviewing DNS queries (C) can…
Question
Which of the following is the MOST effective control for discovering unauthorized cloud service usage in a corporate network?
Options
- AReviewing firewall logs
- BMonitoring any credit card or other payments for cloud services
- CReviewing queries to the internal domain name system (DNS) servers
- DConducting regular software audits
How the community answered
(47 responses)- A68% (32)
- B17% (8)
- C6% (3)
- D9% (4)
Explanation
Firewall logs record all inbound and outbound network traffic, including connections to external cloud service endpoints. This makes them the most comprehensive and proactive tool for detecting unauthorized cloud usage (shadow IT) in real time. Reviewing DNS queries (C) can reveal domain lookups but may miss services accessed via hardcoded IPs. Monitoring credit card payments (B) is reactive and only catches paid services purchased by employees. Software audits (D) identify locally installed applications but do not capture web-based cloud services that require no local installation.
Topics
Community Discussion
No community discussion yet for this question.