Eccouncil 312-50 Exam - Topic 8 Question 90 Discussion

Actual exam question for Eccouncil's 312-50 exam

Question #: 90
Topic #: 8

As a security analyst for Sky Secure Inc., you are working with a client that uses a multi-cloud strategy, utilizing services from several cloud providers. The client wants to implement a system that will provide unified security management across all their cloud platforms. They need a solution that allows them to consistently enforce security policies, identify and respond to threats, and maintain visibility of all their cloud resources. Which of the following should you recommend as the best solution?

AUse a hardware-based firewall to secure all cloud resources.

Bimplement separate security management tools for each cloud platform.

CUse a Cloud Access Security Broker (CASB).

DRely on the built-in security features of each cloud platform.

Show Suggested Answer

Suggested Answer: C

A Cloud Access Security Broker (CASB) is a security policy enforcement point, either on-premises or in the cloud, that administers an organization's enterprise security policies when users attempt to access its cloud-based resources. A CASB can provide unified security management across multiple cloud platforms, as it can monitor cloud activity, enforce security policies, identify and respond to threats, and maintain visibility of all cloud resources. A CASB can also integrate with other security tools, such as data loss prevention (DLP), encryption, malware detection, and identity and access management (IAM), to enhance the security posture of the organization.

The other options are not as effective or feasible as using a CASB. Using a hardware-based firewall to secure all cloud resources may not be compatible with the dynamic and scalable nature of the cloud, as it may introduce latency, complexity, and cost. Implementing separate security management tools for each cloud platform may create inconsistency, inefficiency, and confusion, as each tool may have different features, interfaces, and configurations. Relying on the built-in security features of each cloud platform may not be sufficient or comprehensive, as each platform may have different levels of security, compliance, and functionality.Reference:

What Is a Cloud Access Security Broker (CASB)? | Microsoft

What Is a CASB? - Cloud Access Security Broker - Cisco

What is a Cloud Access Security Broker (CASB)?

by Mira at Aug 27, 2024, 09:52 PM

Limited Time Offer

25%

Off

Get Premium 312-50 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Tien

3 months ago

Surprised that people still think separate tools are a good idea!

upvoted 0 times

...

Kristofer

3 months ago

Hardware firewalls can't manage cloud resources effectively.

upvoted 0 times

...

Matt

3 months ago

Really? I thought relying on built-in features was enough.

upvoted 0 times

...

Sharmaine

4 months ago

I disagree, separate tools might give better control.

upvoted 0 times

...

Jackie

4 months ago

A CASB is definitely the way to go for multi-cloud security.

upvoted 0 times

...

Cathrine

4 months ago

A hardware firewall (option A) seems outdated for cloud environments. I think we need something more integrated, like a CASB.

upvoted 0 times

...

Cary

4 months ago

I practiced a question similar to this, and I think using separate tools (option B) would just complicate things. A unified approach seems better.

upvoted 0 times

...

Samira

4 months ago

I'm not entirely sure, but I feel like relying on built-in security features (option D) could leave gaps. Each provider has different capabilities, right?

upvoted 0 times

...

Mitzie

5 months ago

I remember studying about CASBs and how they can help with visibility and policy enforcement across multiple cloud services. I think option C might be the right choice.

upvoted 0 times

...

Carmen

5 months ago

Okay, I think I've got it. The CASB solution is the way to go here. It provides the centralized security management and control the client needs, while still allowing them to leverage the different cloud platforms. Seems like the most comprehensive and effective option.

upvoted 0 times

...

Corrina

5 months ago

Hmm, this is a tricky one. I'm leaning towards the CASB solution, as it seems to address the key requirements of the client, like enforcing policies and maintaining visibility across the different cloud platforms. But I'll need to think it through a bit more.

upvoted 0 times

...

Dierdre

5 months ago

I'm a bit unsure about this one. The question mentions the need for consistent security policies and visibility across all cloud platforms, so I'm not sure a hardware-based firewall or relying on built-in cloud security features would be the best approach.

upvoted 0 times

...

Amina

5 months ago

This seems like a straightforward question. I think the best solution is to use a Cloud Access Security Broker (CASB) to provide unified security management across the client's multi-cloud environment.

upvoted 0 times

...

Edison

5 months ago

I feel like maintaining a specific style and tone is crucial for branding, so C could be a benefit too.

upvoted 0 times

...

Margot

5 months ago

Definitely face-to-face. You can read body language and tone better, and it's easier to ask follow-up questions. E-mail and instant messaging are too impersonal for this.

upvoted 0 times

...

Kristeen

1 year ago

I bet the client's IT team is already pulling their hair out trying to keep up with all the different cloud platforms. C is the sanity-saving solution here.

upvoted 0 times

...

Adelaide

1 year ago

If they wanted to use a hardware firewall, they should have just stayed on-premise. Cloud is all about flexibility and scalability, which a firewall can't provide.

upvoted 0 times

...

Mayra

1 year ago

B? Separate security tools for each cloud? What is this, the Stone Age? C is the only logical choice to manage security consistently across all the client's cloud resources.

upvoted 0 times

...