Unified Multi-Cloud Security Management Recommendation
As a security analyst for SkySecure Inc., you are working with a client that uses a multi-cloud strategy, utilizing services from several cloud providers. The client wants to implement a system that will provide unified security management across all their cloud platforms. They need a solution that allows them to consistently enforce security policies, identify and respond to threats, and maintain visibility of all their cloud resources. Which of the following should you recommend as the best solution?
Community Votes
100% of anonymous learners picked answer A. Votes are pick records left by other test-takers — they are not the verified answer.
Community Insight
Tests knowledge of cloud security architecture by distinguishing between isolated platform features and centralized brokerage solutions that provide visibility and control.
Identify the best solution for unified security management across multi-cloud environments using a Cloud Access Security Broker (CASB). This page establishes why CASB is superior to native tools or hardware firewalls for consistent policy enforcement.
Candidates often select D, relying on built-in features, because they underestimate the complexity of managing disparate security policies across multiple providers without a central broker.
Community Discussion (4 comments)
Comments & Corrections
No comments yet — spotted an error or have a note? Share it below.
Expert Analysis
Why the Answer Is Correct
A Cloud Access Security Broker (CASB) is specifically designed to sit between cloud service users and providers, offering a unified view and control plane. It enables consistent security policy enforcement, threat detection, and compliance monitoring across heterogeneous cloud environments, which directly addresses the client's need for unified management.Why the Other Options Are Wrong
Option B is incorrect because hardware-based firewalls operate at the network perimeter and cannot effectively manage logical resources or policies within virtualized cloud platforms. Option C fails the requirement for 'unified' management by creating silos of security data and tools. Option D is insufficient because built-in features vary significantly between providers, making consistent policy enforcement and holistic visibility nearly impossible to achieve manually.Community Comment Notes
The community consensus strongly supports option A, with commenters noting it is the only logical choice for this scenario. One user explicitly stated, 'The only one that makes sense,' highlighting the clarity of the problem statement when viewed through the lens of centralized management.Exam Strategy
When questions emphasize 'unified', 'consistent', or 'centralized' management across multiple cloud providers, look for a brokerage or aggregation layer like a CASB rather than individual platform tools.
Frequently Asked Questions
Why not use built-in security features?
Built-in features are provider-specific and fragmented, preventing consistent policy enforcement and holistic visibility required for a unified strategy.
Does a CASB replace cloud security tools?
No, it integrates with them to provide a centralized view and control plane, ensuring policies are applied consistently across different platforms.