Discover the best cloud security solution for pharmaceutical companies hosting sensitive data in object storage. Learn how to effectively monitor changes, detect suspicious activity, and ensure compliance.
Table of Contents
Question
A pharmaceutical company uses a cloud provider to host thousands of independent resources in object storage. The company needs a practical and effective means of discovering data, monitoring changes, and identifying suspicious activity. Which of the following would best meet these requirements?
A. A machine-learning-based data security service
B. A file integrity monitoring service
C. A cloud configuration assessment and compliance service
D. A cloud access security broker
Answer
A. A machine-learning-based data security service
Explanation
A. A machine-learning-based data security service would best meet the pharmaceutical company’s requirements for discovering data, monitoring changes, and identifying suspicious activity in their cloud-hosted object storage.
Machine learning algorithms can analyze vast amounts of data and learn to recognize patterns and anomalies. This enables the data security service to:
- Discover and classify sensitive data: Machine learning can scan the object storage and identify sensitive information, such as patient records or proprietary research data, helping the company maintain an accurate inventory of its data assets.
- Monitor changes: The service can continuously monitor the object storage for changes, such as modifications to access permissions or unusual data access patterns. This allows the company to detect potential security incidents or unauthorized access attempts in real-time.
- Identify suspicious activity: By learning from normal usage patterns, the machine learning algorithms can flag any deviations or anomalous behavior that might indicate a security breach or insider threat. This enables the company to quickly investigate and respond to potential incidents.
While the other options have their merits, they are not as comprehensive as a machine-learning-based data security service:
- A file integrity monitoring service focuses on detecting changes to individual files but may not provide the same level of data discovery and anomaly detection.
- A cloud configuration assessment and compliance service helps ensure that the cloud environment is properly configured and compliant with relevant regulations but does not actively monitor for suspicious activity.
- A cloud access security broker (CASB) can help enforce security policies and control access to cloud resources but may not offer the same level of data discovery and anomaly detection as a machine learning solution.
In summary, a machine-learning-based data security service is the most practical and effective choice for the pharmaceutical company to discover data, monitor changes, and identify suspicious activity in their cloud-hosted object storage.
CompTIA CAS-004 certification exam practice question and answer (Q&A) dump with detail explanation and reference available free, helpful to pass the CompTIA CAS-004 exam and earn CompTIA CAS-004 certification.