CompTIA Cloud+ (CV0-002) — Question 137

A company wants to leverage a SaaS provider for its back-office services, and security is paramount. Which of the following solutions should a cloud engineer deploy to BEST meet the security requirements?

Answer options

• A. Firewall
• B. IPS/IDS
• C. Proxy gateway
• D. CASB

Correct answer: D

Explanation

A Cloud Access Security Broker (CASB) is specifically designed to enhance security for cloud services, making it the best choice for managing risks associated with SaaS applications. While firewalls and IPS/IDS systems provide valuable security measures, they do not specifically address the unique challenges posed by cloud services. A proxy gateway can help with traffic management but lacks the comprehensive security features that a CASB offers.