A company wants to leverage a SaaS provider for its back-office services, and security is paramount. Which of the following solutions should a cloud engineer deploy to BEST meet the security…

A firewall primarily secures network perimeters and is less effective at enforcing security policies within external SaaS applications.

An IPS/IDS monitors network traffic for malicious activity but does not provide granular control or visibility into user actions or data within SaaS applications.

A proxy gateway can filter web traffic, but it lacks the deep visibility, data loss prevention, and compliance capabilities specific to SaaS applications offered by a CASB.

A CASB extends an organization's security policies to cloud applications, providing visibility, data security, threat protection, and compliance assurance specifically for SaaS environments. It allows organizations to monitor and enforce security policies on user activity and data within cloud services, which traditional on-premises security tools like firewalls or IPS/IDS cannot effectively do for external SaaS.