CompTIA CASP+ (CAS-003) — Question 286

Security policies that are in place at an organization prohibit USB drives from being utilized across the entire enterprise, with adequate technical controls in place to block them. As a way to still be able to work from various locations on different computing resources, several sales staff members have signed up for a web- based storage solution without the consent of the IT department. However, the operations department is required to use the same service to transmit certain business partner documents.
Which of the following would BEST allow the IT department to monitor and control this behavior?

Answer options

• A. Enabling AAA
• B. Deploying a CASB
• C. Configuring an NGFW
• D. Installing a WAF
• E. Utilizing a vTPM

Correct answer: B

Explanation

Implementing a CASB (Cloud Access Security Broker) is the best choice because it allows the IT department to monitor and manage the usage of cloud services, ensuring compliance with security policies. The other options, while useful in different contexts, do not specifically address the need to control and monitor cloud service usage effectively.