Exam 350-701 topic 1 question 171 discussion

its clearly B

It's Cisco exam, so the correct answer is - B. Cisco Cloudlock

The question is the definition of CASB but CASB is just the technology not that solution. Cloudlock, which is a cloud-native CASB, is the solution. Compare with Q184

Although Cisco exam, the most correction answer would be D Cisco has SIEM Cisco's Stealthwatch Cloud but that is not an option here. If that were present then it would stealthwatch instead of Cloudlock. I vote for D siem

B since this is a Cisco exam. A SIEM could do this if you set it up to do so.

Cisco Cloudlock for Google Workspace - Digital Marketplace https://www.digitalmarketplace.service.gov.uk/g-cloud/services/468189650542713

It should be B

A and B is the same. I'd pick D

Answer should be B

Answer B

It is d.

Come on guys, it's B... + Cisco Cloudlock continuously monitors cloud environments with a cloud Data Loss Prevention (DLP) engine to identify sensitive information stored in cloud environments in violation of policy. + Cloudlock is API-based. + Incidents are a key resource in the Cisco Cloudlock application. They are triggered by the Cloudlock policy engine when a policy detection criteria result in a match in an object (document, field, folder, post, or file).

A CASB, for any cloud solution. If the question specified a Cisco cloud solution, then B Cloudlock

SIEM software works by collecting log and event data generated by an organizations applications, security devices and host systems and bringing it together into a single centralized platform. ... In this way it detects threats and creates security alerts.

I think it is D, SIEM (Security information and event management). https://www.cisco.com/c/dam/en/us/solutions/collateral/enterprise/design-zone-security-technology-partners/bn_cisco_siem.pdf "This guide focuses on Cisco products and discusses how those products integrate with any third party SIEM product. " "Customers need the ability to log, monitor, and report on security incidents in their data infrastructure, and to log, store, and report on large volumes of security event logs." Cisco Cloudlock is a Cloud-Based Security Broker (CASB). "A CASB provides visibility and compliance checks, protects data against misuse and exfiltration, and provides threat protections against malware like ransomware." So basically Cloudlock is a DLP device.