Exam SY0-601 topic 1 question 698 discussion

The demand asked regard to CASB.

When it's cloud choose CASB

CASB: This is a security policy enforcement point that provides visibility into cloud application use across cloud platforms and identifies unauthorized apps. It can enforce security policies, prevent unwanted activity, and manage how data is moved into the cloud. It can also restrict the download of company applications for personal use and control the data that is uploaded.

I think the answer is D. NG-SWG (is Cloud-based) Based on the below link, it has inline CASB, DLP features too. https://www.netskope.com/security-defined/next-gen-secure-web-gateway

A Cloud Access Security Broker (CASB) would best meet the requirements stated in the scenario. CASBs can provide visibility into which cloud applications are being used across a company, restrict data that is uploaded to the cloud, and prevent unauthorized downloading of company applications for personal use. They act as a gatekeeper, allowing the organization to extend its security policies beyond its own infrastructure. CASBs provide features like visibility, data security, threat protection, and compliance, ensuring secure and only authorized use of cloud services by employees.

B. A CASB (Cloud Access Security Broker): A CASB gives visibility into cloud application usage across the company. It also provides granular control over data movement in and out of cloud applications, thus preventing unauthorized data uploads and restricting certain features like downloading apps for personal use. It's designed specifically for cloud environments

Chatgpt: The solution that best meets the requirements of preventing users from downloading company applications for personal use, restricting data uploads, and providing visibility into application usage across the company is B. A CASB (Cloud Access Security Broker). A CASB is specifically designed to address cloud security concerns and can help enforce policies related to application usage, data protection, and visibility into cloud services.