MCQs

Disclaimer:

Educational Use Only:

The website links provided are to be used strictly for educational and knowledge-gaining purposes only.

No Misuse:

Do not misuse the links or the information contained therein for any commercial, illegal, or unethical activities.

Respect for Websites and Businesses:

Respect the intellectual property and business interests of the websites and their owners. Do not attempt to alter, copy, or redistribute content without proper authorization.

Acknowledge Value of Knowledge:

Recognize and value the knowledge and resources shared by these websites. Use the information responsibly and ethically.

No Endorsement:

The provision of these links does not imply endorsement of the linked sites, their content, or their products and services. Users are responsible for evaluating the suitability and accuracy of the information.

User Responsibility:

By accessing these links, you agree to use the information at your own risk and to comply with all applicable laws and website terms of use.

Which of the following best defines a Cloud Access Security Broker (CASB)?
a. A security tool that enforces cloud application policies between cloud consumers and providers
b. A type of anti-malware software
c. A VPN service for remote access
d. A firewall product
Answer: a. A security tool that enforces cloud application policies between cloud consumers and providerscrowdstrike+1
Which of these is NOT a core function of CASB?
a. Threat protection
b. Data governance
c. Hardware monitoring
d. Compliance assurance
Answer: c. Hardware monitoringcheckpoint+1
CASB provides visibility into:
a. Only on-premises IT assets
b. Only sanctioned cloud applications
c. Both sanctioned and unsanctioned cloud app usage
d. Only network hardware
Answer: c. Both sanctioned and unsanctioned cloud app usagecrowdstrike+1
What is “shadow IT” in the context of CASB?
a. Unauthorized use of cloud applications
b. High-performance computing
c. Automating compliance reporting
d. Externally hosted backups
Answer: a. Unauthorized use of cloud applicationsmanageengine+1
CASBs can enforce security policies for SaaS applications using:
a. API integration
b. Proxy-based deployment
c. Both API and proxy methods
d. Only installing endpoint agents
Answer: c. Both API and proxy methodsmanageengine+1
Which security feature is commonly included in CASBs?
a. Encryption of cloud-stored data
b. Reverse engineering
c. Social engineering training
d. Firmware updates
Answer: a. Encryption of cloud-stored datacyberhaven+1
What role does Data Loss Prevention (DLP) play in CASB?
a. Protects data by blocking malware
b. Prevents accidental or unauthorized data exposure
c. Automates application patching
d. Shreds physical documents
Answer: b. Prevents accidental or unauthorized data exposuretechtarget+1
In a forward proxy CASB deployment, traffic flows:
a. Directly from users to cloud apps
b. From users through CASB, then to cloud apps
c. From cloud apps to local firewalls only
d. Bypasses company security controls
Answer: b. From users through CASB, then to cloud appsversa-networks+1
Which scenario is suited for API-based CASB deployment?
a. Real-time traffic inspection is required
b. Managing data inside SaaS applications via integration
c. Inline web filtering for all endpoints
d. Monitoring only on-premises servers
Answer: b. Managing data inside SaaS applications via integrationcrowdstrike+1
CASB anomaly detection is designed to identify:
a. Routine data backups
b. Unusual user behavior in cloud usage
c. Scheduled software upgrades
d. Frequent password changes
Answer: b. Unusual user behavior in cloud usageexabeam+1
Which regulation do CASBs commonly help organizations comply with?
a. GDPR
b. PCI DSS
c. HIPAA
d. All of the above
Answer: d. All of the abovecheckpoint
A reverse proxy CASB is typically used when:
a. Client devices are unmanaged
b. IT wants real-time inspection without endpoint agent
c. Users directly connect to SaaS without IT control
d. All of the above
Answer: d. All of the aboveskyhighsecurity+1
Which of these is NOT a typical CASB use case?
a. Mitigating insider threats
b. Secure collaboration
c. Managing mobile app store purchases
d. Enforcing access controls
Answer: c. Managing mobile app store purchasescyberhaven+1
CASB can aid in forensic investigations by:
a. Blocking spam emails
b. Logging user activity in cloud apps
c. Generating fake alerts
d. Providing antivirus updates
Answer: b. Logging user activity in cloud appscyberhaven
What is “tokenization” in the context of CASB?
a. Encrypting entire databases
b. Replacing sensitive info with non-sensitive equivalents
c. Creating API tokens for remote access
d. Generating software license keys
Answer: b. Replacing sensitive info with non-sensitive equivalentscheckpoint
Which statement is true about CASB and malware protection?
a. CASB always eliminates malware
b. CASB can detect and block malware from cloud traffic
c. CASB is not involved in malware scanning
d. CASB replaces endpoint antivirus
Answer: b. CASB can detect and block malware from cloud traffictechtarget+1
Why might an organization choose a hybrid CASB deployment?
a. To balance between API integration and inline inspection features
b. To increase printing speeds
c. For local network optimization
d. To eliminate firewalls
Answer: a. To balance between API integration and inline inspection featuresmanageengine+1
User and Entity Behavior Analytics (UEBA) in CASB is used for:
a. Mapping network topology
b. Identifying regular logins
c. Detecting suspicious patterns in user activity
d. Scheduling system updates
Answer: c. Detecting suspicious patterns in user activityexabeam+1
Which capability allows CASBs to prevent data leakage to unsanctioned apps?
a. URL filtering
b. Cloud app discovery
c. Web application firewall
d. DLP policy enforcement
Answer: d. DLP policy enforcementtechtarget+1
Shadow IT risk is best addressed by CASB via:
a. Application whitelisting
b. Complete blocking of internet
c. Providing visibility into usage of all cloud apps
d. Upgrading operating systems
Answer: c. Providing visibility into usage of all cloud appsmicroage+1
Which layer of the OSI model primarily benefits from CASB security?
a. Application layer
b. Physical layer
c. Data link layer
d. Transport layer
Answer: a. Application layercrowdstrike+1
Which of these is a common CASB action when a policy violation is detected?
a. Auto-patching software
b. Quarantining data
c. Changing user passwords automatically
d. Resetting hardware settings
Answer: b. Quarantining datatechtarget+1
In a proxy-based CASB setup, which of the following increases?
a. Security and control over data traffic
b. Email download speeds
c. Number of promoted admins
d. Incidence of physical theft
Answer: a. Security and control over data trafficversa-networks+1
CASB assists the IT team by:
a. Automating routine software installs
b. Summarizing and enforcing data policy violations
c. Training employees on new software
d. Monitoring HVAC usage
Answer: b. Summarizing and enforcing data policy violationscrowdstrike
Which CASB approach offers real-time (in-line) protection?
a. API
b. Proxy
c. DLP
d. Tokenization only
Answer: b. Proxymanageengine+1
What is “sanctioned IT” regarding CASB management?
a. Banned applications
b. Approved and managed cloud applications
c. Malicious email servers
d. External wireless networks
Answer: b. Approved and managed cloud applicationsmicroage+1
Which control type is least associated with CASB?
a. Preventive controls
b. Detective controls
c. Directive controls
d. Physical access controls
Answer: d. Physical access controlsexabeam+1
CASB can help prevent which type of attack vector?
a. Ransomware via cloud storage
b. Keylogger installation on desktops
c. Phishing via personal email
d. Wireless jamming
Answer: a. Ransomware via cloud storageexabeam+1
API-based CASB is most effective for which situation?
a. Deep packet inspection on encrypted traffic
b. Managing data within SaaS apps
c. Blocking phishing websites
d. Regulating power supply to servers
Answer: b. Managing data within SaaS appsmanageengine+1
Which of the following is a policy enforcement example in CASB?
a. Alerting when sensitive files are uploaded to external storage
b. Turning on system fans
c. Reducing disk space usage
d. Customizing mobile device home screens
Answer: a. Alerting when sensitive files are uploaded to external storagecyberhaven+1
CASB analytics can help organizations:
a. Determine cost of cloud usage
b. Identify which users or departments are at risk
c. Upgrade firmware on legacy hardware
d. Automate network wiring
Answer: b. Identify which users or departments are at riskcheckpoint+1
In addition to DLP, what other feature do CASBs often provide?
a. User authentication
b. Two-factor authentication
c. Threat protection
d. Internet speed boosting
Answer: c. Threat protectionexabeam+1
Which deployment model would most likely introduce some network latency?
a. API-based
b. Proxy-based
c. Hybrid-cloud databases
d. Local-only firewalls
Answer: b. Proxy-basedcrowdstrike+1
CASB helps organizations map controls to which of these compliance regulations?
a. GDPR
b. HIPAA
c. PCI DSS
d. All of the above
Answer: d. All of the abovecheckpoint
What occurs during “cloud application usage tracking” in CASB?
a. Only unsanctioned apps are monitored
b. Sanctioned, unsanctioned, and shadow app usage is visible
c. Hardware performance is analyzed
d. Antivirus definitions are updated
Answer: b. Sanctioned, unsanctioned, and shadow app usage is visibletechtarget+1
CASBs with UEBA can respond to risky user behaviors by?
a. Sending system logs to backup servers
b. Requiring stricter authentication
c. Lowering system priority
d. Powering systems off remotely
Answer: b. Requiring stricter authenticationtechtarget+1
What is a benefit of real-time alerting in CASB?
a. Immediate notification of potential security threats
b. Only sending monthly compliance reports
c. Slower response to data risk events
d. Disconnecting network printers
Answer: a. Immediate notification of potential security threatscheckpoint+1
Which action does CASB NOT typically support?
a. Blocking uploads to unsanctioned cloud storage
b. Automating license renewals
c. Applying watermarks to sensitive files
d. Quarantining infected files
Answer: b. Automating license renewalscrowdstrike+1
When deploying a CASB via reverse proxy, what challenge may arise?
a. Reduced compatibility with some mobile apps
b. Always-on network acceleration
c. Only working with local apps
d. Disabling email functionality
Answer: a. Reduced compatibility with some mobile appsskyhighsecurity+1
CASBs enhance cloud security by:
a. Filtering traffic at Layer 2
b. Giving granular visibility and control in cloud
c. Restricting local network bandwidth
d. Encrypting all LAN communications only
Answer: b. Giving granular visibility and control in cloudcheckpoint+1
To ensure compliance reporting, CASB tools may offer:
a. Automated reporting and audit trails
b. Wireless frequency scanning
c. Automated disk defragmentation
d. Physical key distribution management
Answer: a. Automated reporting and audit trailscheckpoint
Why is “cloud threat protection” considered a central feature of CASBs?
a. It replaces local antivirus software
b. It identifies and mitigates threats across cloud ecosystems
c. It reduces memory usage for endpoints
d. It scans for outdated hardware
Answer: b. It identifies and mitigates threats across cloud ecosystemsexabeam+1
What is a “sanctioned app” as per CASB management?
a. Unauthorized application used by employees
b. Approved cloud service vetted by IT
c. Open-source software only
d. Privately developed audit tool
Answer: b. Approved cloud service vetted by ITmicroage+1
In a CASB context, “compliance mapping” refers to:
a. Aligning security controls with regulatory requirements
b. Mapping routes for data transfer
c. Developing wireless coverage plans
d. Mapping firewall rules
Answer: a. Aligning security controls with regulatory requirementscheckpoint
What feature allows CASB to discover sensitive data stored in cloud environments?
a. UEBA analytics
b. Data classification tools
c. Log file comparison
d. Endpoint patching
Answer: b. Data classification toolscrowdstrike+1
Which type of CASB action directly restricts data movement to external services?
a. Alerting only
b. Policy enforcement with blocking
c. Read-only access
d. Web conferencing tools
Answer: b. Policy enforcement with blockingmanageengine+1
Which deployment model is best for unmanaged devices accessing cloud apps?
a. API-based
b. Forward proxy
c. Reverse proxy
d. VPN split tunneling
Answer: c. Reverse proxyskyhighsecurity+1
Which of the following is a key advantage of a hybrid CASB model?
a. Only blocks network traffic
b. Combines strengths of both API and proxy approaches
c. Monitors only external apps
d. Disables mobile applications
Answer: b. Combines strengths of both API and proxy approachesmanageengine+1
What does “activity monitoring” provide in CASB?
a. Analysis of all cloud-based user actions
b. Remote update of endpoint hardware
c. Disabling of operating systems
d. Generation of weekly antivirus reports
Answer: a. Analysis of all cloud-based user actionstechtarget+1
When deploying a CASB, which best practice is recommended?
a. Prioritize visibility and gradual onboarding of apps
b. Block all internet access
c. Deprioritize compliance checking
d. Ignore feedback from end users
Answer: a. Prioritize visibility and gradual onboarding of appsmicroage+1

Blog

Systemethic Technologies

Leave a Reply Cancel reply

Useful links

Other Terms & Policies

Contact Info