CompTIA CASP+ (CAS-003) — Question 348

A creative services firm has a limited security budget and staff. Due to its business model, the company sends and receives a high volume of files every day through the preferred method defined by its customers. These include email, secure file transfers, and various cloud service providers. Which of the following would BEST reduce the risk of malware infection while meeting the company's resource requirements and maintaining its current workflow?

Answer options

• A. Configure a network-based intrusion prevention system
• B. Contract a cloud-based sandbox security service
• C. Enable customers to send and receive files via SFTP
• D. Implement appropriate DLP systems with strict policies

Correct answer: B

Explanation

The correct answer is B because a cloud-based sandbox security service can analyze files in a secure environment before they reach the company's systems, effectively reducing the risk of malware. Options A, C, and D do not provide the same level of proactive protection without requiring extensive resources or altering the current workflow significantly.