"Solution for Identifying Sensitive Data, Maintaining Compliance, and Detecting Threats"
Question
A security engineer needs to recommend a solution that will meet the following requirements: -> Identify sensitive data in the provider's network -> Maintain compliance with company and regulatory guidelines -> Detect and respond to insider threats, privileged user threats, and compromised accounts -> Enforce datacentric security, such as encryption, tokenization, and access control Which of the following solutions should the security engineer recommend to address these requirements?
Answers
Explanations
Click on the arrows to vote for the correct answer
A. B. C. D.A.
The security engineer needs to recommend a solution that can identify sensitive data, maintain compliance with regulations, detect and respond to insider threats, privileged user threats, and compromised accounts, and enforce data-centric security.
Option A: WAF (Web Application Firewall) is a solution that protects web applications by filtering and monitoring HTTP traffic between a web application and the internet. While it can protect against certain attacks, it is not designed to meet the requirements mentioned in the question.
Option B: CASB (Cloud Access Security Broker) is a solution that provides visibility and control over cloud applications and services. It can identify sensitive data, enforce data-centric security, and maintain compliance with regulations. It can also detect and respond to insider threats, privileged user threats, and compromised accounts. CASB would be an excellent solution to meet the requirements mentioned in the question.
Option C: SWG (Secure Web Gateway) is a solution that protects against web-based threats by filtering and monitoring web traffic. While it can provide some level of data-centric security and enforce access controls, it is not designed to meet all the requirements mentioned in the question.
Option D: DLP (Data Loss Prevention) is a solution that identifies, monitors, and protects sensitive data to prevent its unauthorized disclosure. It can enforce data-centric security and maintain compliance with regulations. However, it is not designed to detect and respond to insider threats, privileged user threats, and compromised accounts.
Therefore, the best solution to meet all the requirements mentioned in the question is option B: CASB.
