Question

question 13

how can casbs be implemented?

a only through forward proxies
b through forward proxies, reverse proxies, and apis
c through vpns only
d only through reverse proxies

Explanation:

Analyze CASB deployment modes

Cloud Access Security Brokers (CASBs) are security policy enforcement points placed between cloud service consumers and cloud service providers. They can be implemented using three primary deployment architectures:

1. Forward Proxy: Deployed on the client side or network edge to intercept and inspect outbound cloud traffic from managed devices.
2. Reverse Proxy: Deployed in front of the cloud service to manage and secure incoming traffic, particularly useful for unmanaged or personal devices (BYOD).
3. API-based: Integrates directly with cloud providers via native APIs to inspect data at rest, monitor user activity, and enforce policies out-of-band without altering network traffic.

Evaluate the given options

• Option A: "Only through forward proxies" is incorrect because it ignores reverse proxy and API-based integrations.
• Option B: "Through forward proxies, reverse proxies, and APIs" accurately lists the three standard implementation methods for CASB solutions.
• Option C: "Through VPNs only" is incorrect as VPNs are not the primary or exclusive mechanism for CASB implementation.
• Option D: "Only through reverse proxies" is incorrect because it excludes forward proxy and API-based methods.

Answer:

• (A) Only through forward proxies
• (B) Through forward proxies, reverse proxies, and APIs (Correct answer)
• (C) Through VPNs only
• (D) Only through reverse proxies