Exam SY0-601 topic 1 question 554 discussion

Please guys don't spread confusion if you are not sure about the answer then don't say anything... This question is not talking about 'only data leaks' it is talking about restricting access to internet services and controlling the actions on these services. One thing i know for sure is that DLP won't do that for you. So the answer to this question is C = CASB (Cloud Access Security Broker).

CASB is a security solution that provides visibility and control over the use of cloud services by employees within an organization. It helps enforce security policies and ensures that access to internet services is restricted to authorized users only. CASB allows the organization to define granular policies based on users, devices, locations, and activities, enabling them to control the actions each user can perform on each cloud service. By deploying CASB, the analyst can gain better visibility into data usage and potential data leaks, and apply security policies to prevent unauthorized access and actions on internet services. This can help protect sensitive data and mitigate the risks associated with the use of cloud services within the organization.

when in doubt, CASB it out

If you think it’s DLP you are not ready for the exam yet. The first sentence is out there to throw you off.

Guys, it's A) DLP as there are no mention about cloud. I researched on it too.

By safeguarding data as it traverses networks, including the internet, intranets, and extranets, network DLP solutions help organizations maintain control over their sensitive information and prevent unauthorized access. Network DLP software provides additional benefits, such as: - Increased visibility into network traffic - Content inspection to prevent unauthorized access or exfiltration of sensitive information https://www.splunk.com/en_us/blog/learn/dlp-data-loss-prevention.html

There isn’t a single mention of cloud so there is absolutely NO WAY its CASB. A is correct

CASB also provides DLP https://www.microsoft.com/en-us/security/business/security-101/what-is-a-cloud-access-security-broker-casb

While both CASBs and DLP solutions are used to protect an organization’s data, they differ in their focus. A CASB is focused on cloud services and applications, whereas a DLP tool strives to address all of an organization’s internal data resources, whether in the cloud, on-premises, or stored in endpoints.

I think the guys who are choosing C are causing more confusion...

Final Answer is A. Just do a DPL vs CASB Comparison.

As much as i love ApplebeesWaiter1122 I will have to go with DLP here. This scenario mentions nothing about the cloud.

Perhaps if they mentioned the word cloud in the question, it would become more clear that Answer C and not Answer A (DLP) is the correct one.

Selected Answer: A

A seems right answer