CompTIA Security+ (SY0-601) — Question 553

Following a prolonged data center outage that affected web-based sales, a company has decided to move its operations to a private cloud solution. The security team has received the following requirements:

• There must be visibility into how teams are using cloud-based services.
• The company must be able to identify when data related to payment cards is being sent to the cloud.
• Data must be available regardless of the end user's geographic location.
• Administrators need a single pane-of-glass view into traffic and trends.

Which of the following should the security analyst recommend?

Answer options

• A. Create firewall rules to restrict traffic to other cloud service providers.
• B. Install a DLP solution to monitor data in transit.
• C. Implement a CASB solution.
• D. Configure a web-based content filter.

Correct answer: C

Explanation

The correct answer is C, as a CASB (Cloud Access Security Broker) solution provides visibility into cloud usage, helps identify sensitive data like payment card information, and offers a centralized view of traffic trends. Option A does not address the visibility and data identification requirements, B focuses solely on data in transit without overall cloud visibility, and D is not sufficient for monitoring cloud service usage.