Question

Security policies that are in place at an organization prohibit USB drives from being utilized across the entire enterprise, with adequate technical controls in place to block them. As a way to still be able to work from various locations on different computing resources, several sales staff members have signed up for a web- based storage solution without the consent of the IT department. However, the operations department is required to use the same service to transmit certain business partner documents.

Which of the following would BEST allow the IT department to monitor and control this behavior?

A. Enabling AAA
B. Deploying a CASB
C. Configuring an NGFW
D. Installing a WAF
E. Utilizing a vTPM

Answer 1

The best solution for the IT department to monitor and control unauthorized use of web-based storage is deploying a Cloud Access Security Broker (CASB). It provides visibility into cloud usage, assesses risk, and enforces security policies within an organization while dealing with cloud service providers.

Step-by-step explanation:

The question deals with the issue of unauthorized use of a web-based storage solution by the sales staff at an organization. The IT department is looking for ways to monitor and control this behavior. The best way to achieve this is by employing a Cloud Access Security Broker (CASB). A CASB will help in not just monitoring cloud usage across the organization but also in enforcing security policies. It sits between the organization's infrastructure and the cloud service providers and offers visibility into cloud applications usage, assessment of the risk, and enforces security policies.

While other options such as Application-Aware Authorization (AAA), a Next-Generation Firewall (NGFW), or a Web Application Firewall (WAF) offer security measures, they are not specifically tailored for the control of cloud services as a CASB is. A Virtual Trusted Platform Module (vTPM) is mainly involved with hardware-based security operations and does not directly help with monitoring cloud services.

The best solution for the IT department to monitor and control the behavior of the sales staff members using unauthorized web-based storage solutions is to deploy a CASB (Cloud Access Security Broker). A CASB is a security control that can provide visibility into cloud applications being accessed by users, enforce security policies, and apply data loss prevention measures. It can monitor the activity of users across different cloud services, including web-based storage solutions, and enforce security controls to prevent unauthorized actions or data leakage.