Cloud Access Security Broker for Cloud Security Monitoring
You are a security analyst for CloudSec, a company providing cloud security solutions. One of your clients, a financial institution, wants to shift its operations to a public cloud while maintaining a high level of security control. They want to ensure that they can monitor all their cloud resources continuously and receive real-time alerts about potential security threats. They also want to enforce their security policies consistently across all cloud workloads. Which of the following solutions would best meet these requirements?
Community Votes
100% of anonymous learners picked answer B. Votes are pick records left by other test-takers — they are not the verified answer.
Community Insight
The question tests knowledge of cloud security architectures, specifically identifying which tool provides centralized monitoring and policy enforcement, often confused with basic network or identity controls.
This question evaluates the role of a Cloud Access Security Broker (CASB) in providing visibility, security policy enforcement, and threat detection across cloud environments. It establishes that CASBs are the primary solution for continuous monitoring and real-time alerts in public cloud deployments.
Candidates may select Multi-Factor Authentication (C) because it enhances security but fails to provide the required continuous resource monitoring and broad policy enforcement capabilities described in the scenario.
Community Discussion (3 comments)
Comments & Corrections
No comments yet — spotted an error or have a note? Share it below.
Expert Analysis
Why the Answer Is Correct
A Cloud Access Security Broker (CASB) acts as a bridge between cloud service users and providers, offering critical visibility, compliance, and threat protection. The scenario explicitly requires monitoring all cloud resources continuously, receiving real-time alerts, and enforcing security policies consistently. CASBs specialize in exactly these functions by analyzing traffic and metadata from cloud services to detect anomalies and enforce governance.Why the Other Options Are Wrong
Option A (VPN) secures data transmission but does not provide visibility into cloud workload behavior or application-level security policies. Option C (MFA) strengthens authentication but offers no monitoring or alerting capabilities regarding resource usage or threats. Option D (Client-side encryption) protects data at rest or in transit but leaves operational monitoring and policy enforcement to the underlying infrastructure, which lacks the centralized control requested.Community Comment Notes
Community consensus strongly supports B. One user noted that while EC confirms CASB, elimination clearly shows other options lack 'cloud resource monitor' capabilities. Another user referenced the CEH v12 book directly, confirming CASB is the standard answer for this module. A third user asked for double-checking, indicating some hesitation, but the technical fit remains definitive.Exam Strategy
When a question mentions 'monitoring,' 'alerts,' or 'policy enforcement' in the context of cloud services, think of intermediaries like CASBs or SIEMs rather than foundational tools like firewalls or MFA. Focus on the management plane requirements rather than just the data plane.
Frequently Asked Questions
Why isn't a VPN sufficient for cloud security monitoring?
VPNs only encrypt traffic; they do not inspect cloud application logs or enforce granular security policies on cloud resources.
Does Client-side Encryption provide real-time alerts?
No, encryption protects data confidentiality but does not generate security alerts or monitor resource activity.