Exam CAS-004 topic 1 question 392 discussion

The best answers are A. DLP (Data Loss Prevention) and E. CASB (Cloud Access Security Broker). DLP: Data Loss Prevention solutions monitor and control data transfer, ensuring that sensitive information is not shared inappropriately. It can use document attributes to reduce false positives and does not need to be installed on individual desktops or laptops. CASB: Cloud Access Security Brokers provide security controls specifically for cloud services, monitoring traffic between local NAS, cloud-based repositories, and SaaS solutions, and can enforce policies to prevent data leakage.

he technologies that would BEST meet the CSO’s requirements are A. DLP (Data Loss Prevention) and E. CASB (Cloud Access Security Broker). DLP solutions can monitor and control data transfers, which can help prevent sensitive documents from being shared on personal SaaS solutions. They can also use document attributes to reduce false positives. CASBs provide visibility into and control over cloud services, which can help monitor traffic to and from cloud-based file repositories. They can also enforce security policies across multiple cloud services, which can help prevent sensitive documents from being shared on personal SaaS solutions. While the other options (NGFW, UTM, UEBA, HIPS) can provide some level of security, they do not directly address all of the specific requirements provided by the CSO.

the provided answer is correct to meet the requirement