Question
The Chief Information Security Officer wants to eliminate and reduce shadow IT in the enterprise. Several high-risk cloud applications are used that increase the risk to the organization. Which of the following solutions will assist in reducing the risk?
- A. Deploy a CASB and enable policy enforcement Correct
- B. Configure MFA with strict access
- C. Deploy an API gateway
- D. Enable SSO to the cloud applications
Explanation
A cloud access security broker (CASB) discovers the cloud applications users actually access, rates their risk, and lets the organization enforce policies such as blocking or restricting unsanctioned high-risk apps, which directly reduces shadow IT. MFA and SSO strengthen authentication only for applications the organization already manages, so they do nothing about unsanctioned apps. An API gateway manages traffic to the organization's own APIs, not employee use of third-party cloud services.
