thinQmaster Virtual testing partner Adaptive practice exams that find your weak spots and drill them. Every answer explained. From $69
Enroll

thinQmaster

Find your exam

Five questions free, before you decide.

Step 1 · choose a vendor

In one of our camps? Your practice exams come with the tuition — they are on your study page already.

Cloud Computing · Intermediate

Cloud Access Security Broker (CASB)

Security policy enforcement point between users and cloud services that provides visibility, compliance, data security and threat protection.

Definition

A CASB discovers shadow IT, enforces policies on sanctioned SaaS such as DLP and access control, and detects threats like compromised accounts. Deployment modes include API-based (out-of-band scanning of SaaS data) and proxy-based (forward or reverse proxy, inline). CASB is a core component of Security Service Edge.

Example

A CASB blocks employees from uploading files labeled Confidential to personal cloud storage accounts.

Exam tip

API-mode CASBs scan data at rest in SaaS; proxy modes provide real-time inline control. Shadow IT discovery is a classic CASB use case.

Related terms