Exam CS0-002 topic 1 question 72 discussion

Cloud Access Security Broker (CASB): An enterprise management software designed to mediate access to cloud services by users across all types of devices

UEM stands for Unified Endpoint Management. It is a comprehensive approach to manage and secure all types of endpoint devices (such as laptops, mobile phones, and tablets) in an organization from a single console. UEM software provides capabilities such as device management, security management, application management, content management, and data protection for all endpoints, regardless of the operating system and device ownership model. In the scenario described in the question, implementing a CASB to prevent certain types of data from being downloaded to a workstation may be a valid solution, but it may not address the issue of unmanaged laptops and users with administrative rights. Implementing UEM (Unified Endpoint Management) on all systems and deploying security software could help address these issues by allowing the security team to manage and secure all endpoints, enforce security policies, and monitor and respond to security incidents in real-time

(Unified Endpoint Management): UEM provides centralized management of all company endpoints, including laptops, desktops, tablets, and mobile devices. (Cloud Access Security Broker): A CASB can provide visibility and control over cloud services used by the organization. However, it wouldn't directly address the security vulnerabilities on unmanaged laptops and user administrative rights.

C. Implement a CASB and prevent certain types of data from being downloaded to a workstation. Implement UEM on all systems and deploy security software (Option A): - While Unified Endpoint Management (UEM) and security software are important components of a security strategy, they might not be sufficient on their own to address the specific concerns of data protection in a cloud-centric environment. Implement a CASB and prevent certain types of data from being downloaded to a workstation (Option C): - Cloud Access Security Broker (CASB) solutions are designed to protect data as it moves between on-premises and cloud environments. By implementing a CASB, the company can enforce policies that prevent certain types of data from being downloaded to unmanaged workstations, providing a more granular and cloud-focused approach to data protection.

As analysts, we face many issues in our day to day, prioritizing asset matters. While managing devices is necessary, prioritizing the protection of the Confidentiality, Integrity, and Availability (CIA) of the data is paramount. Given that the data is stored in the cloud, implementing a CASB solution becomes instrumental in addressing and enhancing the overall protection of the data.

The problem is shown from the perspective that the primary concern is to protect the company's data from unsafe company-owned laptops, then the best approach would involve addressing the vulnerabilities that could come up from those laptops. In this case, option A would be the most suitable. 1. Unified Endpoint Management (UEM): Implementing UEM allows for centralized control and management of all company-owned laptops. This includes enforcing security policies, ensuring software is up to date, and remotely wiping or locking devices if they are lost or compromised. 2. Deploying Security Software: Deploying security software, including antivirus, anti-malware, and firewall solutions, is essential for protecting laptops from various threats. It can help detect and prevent malware infections and other security risks.

A cloud security broker, or cloud access security broker (CASB), is a software layer that operates as a gatekeeper between an organization’s on-premises network and the provider’s cloud environment. It can provide many services in this strategic position like: 1. Compliance 2. Data security 3. Threat protection and 4. Data loss prevention

It is A (UEM). Look at the big picture! UEM is a comprehensive tool which will solve all the issues mentioned in the question.

I have selected C - Theres a reason it included "A Company stores all it's data in the cloud"

answer is A: DLP can be bypassed or disabled by an authorized user who has administrative rights. C: CASB :: can help protect data in the cloud, but it does not address the issue of unmanaged laptops or users with administrative rights.

aSBhbSBnYXk=

Answer is B. The question is asking the best way to protect the company's data. The arguments for B or C are pretty good but we have to look at it from the scope of this course. CASB for the sake of this course is there to manage access to the cloud, where DLP's purpose is for protecting data. The best way to protect the data is to manage those laptops and implement DLP on all of them. CASB won't protect the data, think of them as security at the front door. Its a deterrent vs a preventative measure. I hope this helps.

An advantage of using a CASB for enforcement in DLP policies is that it is built for cloud security. A CASB will examine the traffic to and from a cloud application and enforce DLP policies for those cloud services.

CASB and DLP are both very viable but because of its wider reach I am going to go with DLP - https://www.nextdlp.com/resources/blog/casb-vs-dlp-whats-the-difference#:~:text=The%20main%20difference%20between%20a,premises%2C%20or%20stored%20in%20endpoints.

Chat gpt The BEST method to protect the company's data in this scenario would be to implement UEM (Unified Endpoint Management) on all systems and deploy security software. By doing so, the security team can enforce policies, manage software, and secure endpoints to protect against potential data breaches. Additionally, implementing DLP (Data Loss Prevention) and a CASB (Cloud Access Security Broker) can provide additional layers of security, but those would be secondary to deploying UEM and security software to protect the unmanaged laptops. Centralized monitoring and logging is also an essential practice to identify potential security incidents, but it is not a solution to secure the environment.

C. Originally I kinda though DLP maybe, but B is the best answer for this question. One of CASB functionality is to mitigate Data exfiltration.

Cloud Access Security Broker (CASB) A cloud access security broker (CASB) is enterprise management software designed to mediate access to cloud services by users across all types of devices. Some of the functions of a CASB are: - Enable single sign-on authentication and enforce access controls and authorizations from the enterprise network to the cloud provider. - Scan for malware and rogue or non-compliant device access. - Monitor and audit user and resource activity. - Mitigate data exfiltration by preventing access to unauthorized cloud services from managed devices.