What security service sits between cloud consumers and cloud providers to enforce security policies, provide visibility, DLP, and shadow IT detection?

• A. WAF
• B. VPN Gateway
• C. SIEM Solutions
• D. CASB - Cloud Access Security Broker

Answer: (D)

Cloud Access Security Broker (CASB) sits between cloud consumers and cloud providers to enforce security policies, provide visibility into cloud usage, deliver data loss prevention, and detect shadow IT. It acts as the security control point across SaaS, IaaS, and PaaS, able to monitor who is accessing what data, apply policy-driven protections, and surface unsanctioned applications. CASB can enforce access controls, encryption, and threat protection, often via in-line or API-based deployments, giving organizations control over data as it moves to and from cloud services. This combination of policy enforcement, visibility, DLP, and shadow IT detection is not the primary function of a WAF, VPN gateway, or SIEM, making CASB the best fit for the described role.