Exam SY0-601 topic 1 question 137 discussion

CASB, better may to keep track accross multiple cloud based security solutions > Open to discussion

Answer should be CASB. As per CompTIA Sec+ objectives, CMS is a content management system, not a cloud. CMP term is used for Cloud Management Platforms.

A. CASB

CASB stands for Cloud Access Security Broker, which is a security solution that helps organizations secure data and applications in cloud environments. CASBs act as intermediaries between cloud service users and cloud service providers, providing visibility, control, and security features to monitor and protect data as it moves between the organization's network and cloud services. In the given scenario, the incident response time increased after migrating security solutions to the cloud because analysts are dealing with different cloud consoles and data in various formats. Implementing a CASB can help optimize incident response time by providing a centralized platform to monitor and manage security events across multiple cloud services. CASBs can aggregate logs and events from various cloud platforms, standardize data formats, and provide a single pane of glass for security analysts to investigate and respond to incidents more efficiently.

A Cloud Access Security Broker (CASB) is a security solution specifically designed to provide visibility, control, and data security across multiple cloud services. It acts as an intermediary between an organization's on-premises infrastructure and cloud providers, offering centralized visibility and management of cloud-related security incidents and data. By using a CASB, security analysts can have a single point of access to monitor and manage security events and data across different cloud consoles. It helps to correlate data in a consistent format, simplifying the incident response process and reducing response times.

Amm, so CASB acts like a SIEM solution but for cloud, Okay good to know.

A Cloud Access Security Broker (CASB) can be used to optimize the incident response time after multiple on premises security solutions are migrated to the cloud. CASBs provide centralized visibility and control over cloud applications and data, allowing analysts to quickly correlate data in a single console and take immediate action to mitigate incidents. Therefore, option A is the correct answer. VPC (Virtual Private Cloud) is a cloud networking construct that allows a company to create an isolated private network in the cloud, but it does not optimize the incident response time. SWG (Secure Web Gateway) is a cloud-based security solution that provides protection against web-based threats, but it does not directly address the issue of incident response time. CMS (Content Management System) is a software application that allows for the creation, modification, and publishing of digital content, but it is not a security solution and does not address incident response.

Why do people keep typing “ago”

I think the answer is CASB, for perhaps a different reason than others. It states that several security systems were moved from on prem to the cloud. It's likely that CASB could REPLACE those systems, providing a single pane of glass for responding to incidents. No other solution is going to consolidate and simplify information from their legacy on prem solutions that they moved to the cloud.

https://www.microsoft.com/en-us/security/business/security-101/what-is-a-cloud-access-security-broker-casb

A cloud access security broker (CASB) is a software tool or service deployed between an organizations network and the cloud provider. It provides security by monitoring traffic and enforcing security policies. A next generation secure web gateway (SWG) provide proxy service for traffic from clients to Internet sites, such as filtering URLs and scanning for malware.

ChatGPT says the answer is D. Configuration management system

As per the Comptia SYO-601 Acronym list : CMS: Content management system, not cloud management system. I'm sure Cloud management system is a real thing but according to the Sec+ exam objectives CMS is something totally different.

D. CMS A Cloud Management System (CMS) is a tool that helps to manage and monitor cloud resources. It can be used to optimize incident response time by providing a centralized platform for viewing and analyzing data from multiple cloud consoles. This can help analysts to more quickly trace information and correlate data, as they do not have to switch between different consoles and deal with data in different formats. A Cloud Access Security Broker (CASB) is a security solution that sits between an organization's on-premises infrastructure and the cloud and helps to secure data in the cloud. A Virtual Private Cloud (VPC) is a virtual network that is dedicated to an organization and isolated from other virtual networks in the cloud. A Secure Web Gateway (SWG) is a security solution that is used to protect an organization's users from internet-based threats. None of these solutions are directly related to optimizing incident response time in the way that a CMS is.

CASB vs SWG CASB is the more optimal solution for multiple on premises security solutions CASB services are explicitly designed to fit the needs of large enterprises You can access link and read about it: https://www.gend.co/blog/casb-or-swg-which-is-best-option-for-your-enterprise

To optimize the incident response time, the company could implement a Cloud Management System (CMS). A CMS is a tool that allows an organization to manage and monitor all of its cloud-based resources and services from a single, centralized platform. This would enable the analysts to quickly access and correlate data from different cloud consoles and formats, reducing the time and effort required to respond to security incidents. Other solutions such as a Cloud Access Security Broker (CASB) or a Secure Web Gateway (SWG) could also help to improve security in the cloud, but a CMS would be the most effective solution for optimizing incident response time in this scenario. A Virtual Private Cloud (VPC) would not be relevant in this context

https://www.instreamcorp.com/wp-content/uploads/2018/11/What-is-CASB.jpg