Cloud Access Security Broker for Cloud Security Monitoring

312-50v12 By islever Editorial Last updated

Cloud Computing

Short answer

B Deploy a Cloud Access Security Broker to enable continuous monitoring, real-time threat alerts, and consistent security policy enforcement across cloud workloads.

Question

You are a security analyst for CloudSec, a company providing cloud security solutions. One of your clients, a financial institution, wants to shift its operations to a public cloud while maintaining a high level of security control. They want to ensure that they can monitor all their cloud resources continuously and receive real-time alerts about potential security threats. They also want to enforce their security policies consistently across all cloud workloads. Which of the following solutions would best meet these requirements?
  1. Implement a Virtual Private Network (VPN) for secure data transmission.
  2. Deploy a Cloud Access Security Broker (CASB). Correct Answer
  3. Use multi-factor authentication for all cloud user accounts.
  4. Use client-side encryption for all stored data.

Key Takeaways

The question tests knowledge of cloud security architectures, specifically identifying which tool provides centralized monitoring and policy enforcement, often confused with basic network or identity controls.

This question evaluates the role of a Cloud Access Security Broker (CASB) in providing visibility, security policy enforcement, and threat detection across cloud environments. It establishes that CASBs are the primary solution for continuous monitoring and real-time alerts in public cloud deployments.

Common mistake: Candidates may select Multi-Factor Authentication (C) because it enhances security but fails to provide the required continuous resource monitoring and broad policy enforcement capabilities described in the scenario.

Expert Analysis

Why the Answer Is Correct

A Cloud Access Security Broker (CASB) acts as a bridge between cloud service users and providers, offering critical visibility, compliance, and threat protection. The scenario explicitly requires monitoring all cloud resources continuously, receiving real-time alerts, and enforcing security policies consistently. CASBs specialize in exactly these functions by analyzing traffic and metadata from cloud services to detect anomalies and enforce governance.

Why the Other Options Are Wrong

Option A (VPN) secures data transmission but does not provide visibility into cloud workload behavior or application-level security policies. Option C (MFA) strengthens authentication but offers no monitoring or alerting capabilities regarding resource usage or threats. Option D (Client-side encryption) protects data at rest or in transit but leaves operational monitoring and policy enforcement to the underlying infrastructure, which lacks the centralized control requested.

Community Comment Notes

Community consensus strongly supports B. One user noted that while EC confirms CASB, elimination clearly shows other options lack 'cloud resource monitor' capabilities. Another user referenced the CEH v12 book directly, confirming CASB is the standard answer for this module. A third user asked for double-checking, indicating some hesitation, but the technical fit remains definitive.

Exam Strategy

When a question mentions 'monitoring,' 'alerts,' or 'policy enforcement' in the context of cloud services, think of intermediaries like CASBs or SIEMs rather than foundational tools like firewalls or MFA. Focus on the management plane requirements rather than just the data plane.

Frequently Asked Questions

Why isn't a VPN sufficient for cloud security monitoring?

VPNs only encrypt traffic; they do not inspect cloud application logs or enforce granular security policies on cloud resources.

Does Client-side Encryption provide real-time alerts?

No, encryption protects data confidentiality but does not generate security alerts or monitor resource activity.

More 312-50v12 FAQ →

Community Votes

B
100%

100% of anonymous learners picked answer B. Votes are pick records left by other test-takers — they are not the verified answer.

Discussion 3 contributions

Compiled from public community threads and reader submissions, lightly edited for clarity. Handles and vote tallies are shown as recorded, and comments reflect the views of individual contributors.

From public community threads 3

  1. LordXander 👍 2
    Well, EC says CASB as posted by the coleague. However, by elimination: A - doesn't provide the require information such as cloud resource monitor B - does everything needed C - again, doesn;t provide any sort of alert besides failed auth and no logging for resouces D - again, resource management and alerts
  2. insaniunt 👍 2 Answered B
    B. Deploy a Cloud Access Security Broker (CASB). - module 19 page 3305 from ceh v12 book
  3. multivolt 👍 1
    Hey team can we double-check this response

Reader comments & corrections

No reader corrections yet — spotted an error or have a note? Share it below.

Log in to comment, report an error, or add a note about this question.

Comprehensive Network Scanning Sequence

S-grade

NetBIOS Enumeration on IPv6 Networks

S-grade

Ethical Hacker Liability and Organizational Risk Acceptance

S-grade

Least Likely Social Engineering Method Based on Footprinting Data

S-grade

← Back to 312-50v12 Study Guide