Which term refers to a security solution designed to manage and control cloud service usage across users and devices?

Which term refers to a security solution designed to manage and control cloud service usage across users and devices?

• A. Credentialed scan
• B. Vulnerability scanner
• C. Cloud identity and access management
• D. Cloud access security broker (CASB)

Answer: (D)

The term that fits this description is a Cloud Access Security Broker. A CASB sits between users and cloud services and provides visibility into which cloud apps are in use, who is using them, and from which devices. It enforces security policies across both sanctioned and unsanctioned cloud applications, giving you control over access, data protection (like DLP and encryption), and threat protection, while helping maintain compliance. This combination of visibility and policy enforcement across multiple users and devices is what sets CASB apart from the other options. A credentialed scan or a vulnerability scanner focuses on identifying weaknesses in systems, not governing cloud service usage. Cloud identity and access management handles authentication and access to cloud resources but doesn’t inherently provide broad governance or control of cloud app usage across devices.

The term that fits this description is a Cloud Access Security Broker. A CASB sits between users and cloud services and provides visibility into which cloud apps are in use, who is using them, and from which devices. It enforces security policies across both sanctioned and unsanctioned cloud applications, giving you control over access, data protection (like DLP and encryption), and threat protection, while helping maintain compliance. This combination of visibility and policy enforcement across multiple users and devices is what sets CASB apart from the other options. A credentialed scan or a vulnerability scanner focuses on identifying weaknesses in systems, not governing cloud service usage. Cloud identity and access management handles authentication and access to cloud resources but doesn’t inherently provide broad governance or control of cloud app usage across devices.