Which two use cases would be considered examples of Shadow IT within an organization? (Choose two.)

Question

Options

• Aa sanctioned Salesforce account used by a contractor to upload non-sensitive data
• Ba sanctioned Wetransfer being used by a corporate user to share sensitive data
• Can unsanctioned Microsoft 365 OneDrive account being used by a corporate user to upload
• Dan unsanctioned Google Drive account used by a corporate user to upload non-sensitive data

• A
  8% (3)
• B
  19% (7)
• C
  72% (26)

Explanation

Shadow IT is the term for the unauthorized use of IT resources and functions by employees within an organization. It can include cloud services, software, and hardware that are not approved or managed by the IT department. Two use cases that would be considered examples of shadow IT within an organization are: an unsanctioned Microsoft 365 OneDrive account being used by a corporate user to upload sensitive data and an unsanctioned Google Drive account used by a corporate user to upload non-sensitive data. In both cases, the corporate user is using a personal cloud storage service that is not sanctioned by the organization to store work-related data. This can introduce security risks, such as data leakage, data loss, compliance violations, malware infections, etc. The IT department may not have visibility or control over these cloud services or the data stored in them.

No community discussion yet for this question.