CV0-004 Security Practice Question
Which of the following is a key benefit of using a Cloud Access Security Broker (CASB)?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Discovers and controls use of unauthorized cloud applications
CASBs provide visibility and control over SaaS applications, including shadow IT discovery.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Automates resource provisioning
Why it's wrong here
A CASB enforces security policy, visibility and data-loss controls between users and cloud services; it does not provision compute, storage or network resources. It is tempting because CASBs integrate with cloud platforms, but it would be correct for orchestration and deployment automation, not access security.
- ✗
Provides DDoS protection
Why it's wrong here
A CASB governs cloud usage through discovery, encryption, tokenisation and access-policy enforcement; volumetric DDoS mitigation is delivered by edge scrubbing services or a WAF. It is tempting because both are cloud security controls, but it would be correct when absorbing and filtering attack traffic before it reaches the origin.
- ✗
Manages encryption keys for on-premises data
Why it's wrong here
A CASB applies policy and encryption to data moving to and within sanctioned cloud services; it does not run the key-management infrastructure protecting on-premises data at rest. It is tempting because CASBs handle encryption, but it would be correct for cloud-usage governance, not for managing on-premises key lifecycles.
- ✓
Discovers and controls use of unauthorized cloud applications
Why this is correct
A CASB provides shadow IT discovery, identifying cloud applications in use that fall outside sanctioned policy. It then enforces controls such as blocking or restricting those unsanctioned services, satisfying the requirement to both discover and control unauthorised cloud application usage.
Go deeper
Related to this question
About these practice questions
This CV0-004 question is part of Courseiva's 834-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This CV0-004 practice question is part of Courseiva's free CompTIA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the CV0-004 exam.