CompTIA Security+ (SY0-601) — Question 787

A company has decided to move its operations to the cloud. It wants to utilize technology that will prevent users from downloading company applications for personal use, restrict data that is uploaded, and have visibility into which applications are being used across the company. Which of the following solutions will best meet these requirements?

Answer options

• A. An NGFW
• B. A CASB
• C. Application whitelisting
• D. An NG-SWG

Correct answer: B

Explanation

A CASB (Cloud Access Security Broker) is specifically designed to provide visibility and control over cloud applications, enforcing security policies such as preventing unauthorized downloads and restricting data uploads. The other options, while they may offer some security features, do not provide the comprehensive management and visibility required for cloud application usage across the organization.