TechKnowSurge
CompTIA Security+ 4.5
TechKnowSurge Catalog Interactives Which CASB Pillar?
InteractiveSecurityFree

Which CASB Pillar?

Finding apps, stopping malware, protecting data or meeting the rules? Sort what a CASB does into its four pillars.

⚑ Complete this interactive to capture a CTF flag worth 5 points.

About this interactive

A cloud access security broker, or CASB, is a service bought from a third party to control access to an organization's cloud resources. It solves two main problems. The first is shadow IT: someone starts using a cloud app without IT knowing, such as the manager who set up business accounts with her personal email and left. The second is data loss: even on an approved app, a user uploads customer information that should not be there. Its four pillars: Visibility: discovering and monitoring the cloud services in use, so shadow applications come to light. Threat protection: analyzing what goes into the cloud for threats, such as malware in an uploaded file. Data security: data loss prevention, making sure sensitive data such as PII does not end up where it should not, along with encryption. Compliance: helping the organization meet laws, regulations and standards such as GDPR or HIPAA. To sort a card, ask what the job protects against: not knowing, an attack, losing data, or breaking the rules.

What you'll learn

Aligned to

CompTIA Security+
4.5 Given a scenario, modify enterprise capabilities to enhance security.

Key terms

Cloud Access Security Broker
CASB
A Cloud Access Security Broker is a security enforcement point positioned between cloud service users and providers that applies enterprise security policies including visibility, compliance, data security, and threat protection to cloud service usage.
Shadow IT
The use of unauthorized software, systems, or services within an organization without IT department knowledge or approval. Shadow IT creates security blind spots because unmanaged assets fall outside standard patching, monitoring, and access controls.
Data Loss Prevention
DLP
A set of tools and processes designed to detect and prevent unauthorized access, use, or transmission of sensitive data.
Visibility
A CASB pillar that enables organizations to discover and monitor all cloud services and applications in use, including unauthorized shadow IT.

Topics

Interactive Categorize

About TechKnowSurge

TechKnowSurge builds IT and cybersecurity professionals through hands-on, concept-first training built around real understanding — not memorization. Free interactive tools, structured programs, and 25+ years of real-world experience, all in one place.

Explore free tools and programs →