A security engineer is working to address the growing risks that shadow IT services are introducing to the organization. The organization has taken a cloud-first approach end does not have an on…

The correct answer is B. Deploying an appropriate in-line CASB solution. A Cloud Access Security Broker (CASB) solution is the most suitable option for securing an organization that has adopted a cloud-first strategy and does not have an on-premises IT infrastructure. CASBs provide visibility and control over shadow IT services, enforce security…

Submitted by mateo_ar· Mar 6, 2026Threats, vulnerabilities, and mitigations

Question

A security engineer is working to address the growing risks that shadow IT services are introducing to the organization. The organization has taken a cloud-first approach end does not have an on- premises IT infrastructure. Which of the following would best secure the organization?

Options

AUpgrading to a next-generation firewall
BDeploying an appropriate in-line CASB solution
CConducting user training on software policies
DConfiguring double key encryption in SaaS platforms

How the community answered

(46 responses)

A
20% (9)
B
67% (31)
C
4% (2)
D
9% (4)

Explanation

A Cloud Access Security Broker (CASB) solution is the most suitable option for securing an organization that has adopted a cloud-first strategy and does not have an on-premises IT infrastructure. CASBs provide visibility and control over shadow IT services, enforce security policies, and protect data across cloud services.

Community Discussion

No community discussion yet for this question.

Full SY0-701 Practice