Exam SY0-601 topic 1 question 759 discussion

When in doubt, it's CASB

B. Leverage a cloud access security broker (CASB). A CASB can help monitor and enforce security policies for cloud applications, including restricting access to only authorized and business-related applications. It provides visibility into user activities and helps prevent unauthorized access to personal SaaS applications from the company network.

B. Leverage a cloud access security broker. To enforce the policy of restricting users to accessing only business-related cloud applications from within the company network, a Cloud Access Security Broker (CASB) should be leveraged. A CASB is a security solution that helps organizations monitor and control the use of cloud services, including Software as a Service (SaaS) applications.

B : Leverage a cloud access security broker. It can monitor and control the cloud apps that users access, and apply security policies to prevent unauthorize or risky activities. A CASB can also block unsactioned apps by integrating with Microsoft Defender for Endpoint.

VDI (Virtual Desktop Interface) could solve this issue quite easily

D. i don't want to confuse people so let me explain my thought process. a. emplementing a single sign on would not stop someone from connecting to a resource because they would just enter a password and user to login b. the question says cloud access security broker, with this one they're trying to confuse you CASB is could for managing cloud services however the question states that "users accessing PERSONAL SaaS applications. this means that the company cant apply permisions to the SaaS service because it's the users personal SaaS. right now I'm stuck in-between c and d.