An IT manager needs to ensure that sensitive customer data stored in an organization's cloud environment is not improperly accessed or leaked. Which technology can be employed to monitor and restrict access to sensitive data stored in cloud repositories?
Practise this CCSP Cloud Security Prep question free, then download the PDF, watch the video walkthrough, or unlock timed mock exams for the full web bank.
✓ Correct answer: C. Cloud Access Security Broker (CASB)Answer: Cloud Access Security Broker (CASB) A Cloud Access Security Broker (CASB) is a security policy enforcement point placed between cloud service users and cloud applications to monitor and enforce data security policies. CASBs provide visibility, data security, threat protection, and compliance. Multi-Factor Authentication (MFA) is a security enhancement that requires users to present multiple pieces of evidence (credentials) before being granted access to a system, but it doesn't monitor or restrict access to data. Virtual Private Network (VPN) creates a secure channel over the internet for data transmission, ensuring data privacy during transit but does not proactively monitor or control access to data. Encryption ensures data privacy by converting it into a secure format that can only be read by authorized users, but it doesn't control or monitor who accesses the data once decrypted.
Keep practising. Use the free CCSP Cloud Security Prep PDF, watch the YouTube walkthrough, or unlock all 10 web questions with timed mock exams.
Free practice here. Timed mocks when you are ready.
Study the CCSP Cloud Security Prep free question explanations, download the PDF, then unlock timed mock exams on the web when you want exam-day practice.
Theory