Certified Ethical Hacker (CEH v12) — Question 189

As a security analyst for SkySecure Inc., you are working with a client that uses a multi-cloud strategy, utilizing services from several cloud providers. The client wants to implement a system that will provide unified security management across all their cloud platforms. They need a solution that allows them to consistently enforce security policies, identify and respond to threats, and maintain visibility of all their cloud resources. Which of the following should you recommend as the best solution?

Answer options

• A. Use a Cloud Access Security Broker (CASB).
• B. Use a hardware-based firewall to secure all cloud resources.
• C. Implement separate security management tools for each cloud platform.
• D. Rely on the built-in security features of each cloud platform.

Correct answer: A

Explanation

The correct answer is A because a Cloud Access Security Broker (CASB) provides a unified approach to security across multiple cloud platforms, enabling consistent policy enforcement and threat management. Option B is incorrect as a hardware-based firewall does not effectively manage security across different cloud services. Option C is not ideal since separate tools can lead to fragmented security management, and option D relies too much on the individual cloud providers' security, lacking centralized control.