As a security analyst for Sky Secure Inc., you are working with a client that uses a multi-cloud strategy, utilizing services from several cloud…

A Cloud Access Security Broker (CASB) is a security policy enforcement point that sits between cloud service consumers and cloud service providers. Its primary function is to provide a unified control plane for visibility, compliance, data security, and threat protection across multiple, disparate cloud services. For an organization with a multi-cloud strategy, a CASB offers a centralized solution to consistently enforce security policies, monitor activity, and manage threats from a single point of management, directly addressing the client's requirements for unified security.

A. A hardware-based firewall is impractical for securing virtualized, geographically dispersed multi-cloud resources and cannot provide unified policy management across different cloud platforms.

B. Using separate tools for each platform creates security silos and management complexity, which is the exact problem the client wants to solve with a unified system.

D. Relying solely on built-in features leads to fragmented security management, as each cloud provider has its own distinct set of tools, making consistent cross-platform policy enforcement difficult.

1. National Institute of Standards and Technology (NIST). (2020). Zero Trust Architecture (NIST Special Publication 800-207).

Section 3.2.2

"CASB (Cloud Access Security Broker)

" describes a CASB as a tool that can act as a policy enforcement point for cloud services

stating it "can host a PEP for an enterprise by enforcing policies on cloud access." This supports its role in centralized policy enforcement across cloud platforms.

2. Almulla

S. A.

& Iraqi

Y. (2021). A Comprehensive Survey on Cloud Access Security Broker. IEEE Access

9

28998-29021.

Section I (Introduction)

Paragraph 2: The paper states

"CASB provides a single control point to enforce security policies across multiple cloud services simultaneously." This directly validates the CASB as the correct solution for unified management in a multi-cloud environment. (DOI: https://doi.org/10.1109/ACCESS.2021.3059797)

3. Ko

R. K.

Jagadpramana

P.

Mowbray

M.

Pearson

S.

Kirchberg

M.

Liang

Q.

& Lee

B. S. (2011). TrustCloud: A framework for accountability and trust in cloud computing. Proceedings of the 2nd IEEE CloudCom conference on Cloud Computing Technology and Science.

This foundational work discusses the need for broker-based architectures to manage trust and accountability across cloud services

highlighting the principles that underpin modern CASB solutions for multi-cloud governance. (DOI: https://doi.org/10.1109/CloudCom.2010.55)