Exam CAS-005 topic 1 question 47 discussion

✅ B. Restrict uploading activity to only authorized sites. 🔍 Explanation: The scenario describes signs of a targeted attack (e.g., brute force + impossible travel) that may have resulted in data exfiltration attempts to an unauthorized external site. To prevent data from being leaked, the most effective control is to: Limit file uploads to trusted, authorized destinations only — for example, blocking uploads to unknown IPs or domains using a DLP solution, CASB, or proxy. This approach directly mitigates the core issue: preventing unauthorized data transfers even if an account is compromised.