A cloud security architect is designing controls to detect employees uploading sensitive corporate data to unauthorized personal cloud storage services. Which control BEST addresses this requirement?

Question

Accepted Answer

A. Deploy a proxy-based CASB configured to detect and block shadow IT traffic. Shadow IT detection — identifying and blocking the use of unauthorized cloud services — is a core capability of CASB. A proxy-based CASB is positioned inline to inspect outbound cloud traffic and can identify and block uploads to personal cloud storage not sanctioned by the organization. The CAS-005 V5 objectives list shadow IT detection under cloud capabilities in Security Architecture.

A cloud security architect is designing controls to detect employees uploading sensitive corporate data to unauthorized personal cloud storage services. Which control BEST addresses this requirement?

Related Questions

Discussion