Which of the following security tools will ensure authorized data is sent to the application when implementing a cloud based application?

A Host-based Intrusion Prevention System (HIPS) monitors and blocks suspicious behavior or known attack patterns on an endpoint, but it does not enforce authorization rules that define which data or users are permitted to interact with an application.

An Access Control List (ACL) defines rules that permit or deny traffic based on criteria such as source IP, user identity, or resource type, ensuring only authorized entities can send data to the application. In cloud-based applications, ACLs are applied at the network, storage, or API layer to enforce least-privilege access. This directly addresses the requirement of ensuring authorized data reaches the application by blocking unauthorized requests at the policy level.

File Integrity Monitoring (FIM) detects unauthorized changes to files and system configurations to ensure data integrity at rest, but it does not control or validate whether incoming data sent to an application is from an authorized source.

Data Loss Prevention (DLP) is designed to prevent sensitive data from leaving the organization (data exfiltration), not to control or validate whether inbound data sent to an application is authorized.