When undertaking a cloud migration of multiple saas applicat - CompTIA CySA+ CSO-003

The correct answer is B. SASE.

SASE (Secure Access Service Edge) is a service model that combines network security functions (such as SD-WAN) with cloud-native security services (like Zero Trust Network Access, secure web gateways, and cloud access security brokers). SASE helps simplify the management of access to cloud-based applications by providing a unified approach to security, including identity and access management, regardless of where users or applications are located. By adopting SASE, an organization can extend its security controls to cloud-based assets in a more streamlined way, reducing the complexity of the migration process.

Why the others are incorrect:

• CASB (Cloud Access Security Broker): CASB is a security solution designed to provide visibility and control over cloud services. While CASBs are useful for enforcing security policies and monitoring cloud applications, they are more focused on providing governance and compliance monitoring for SaaS applications, rather than simplifying the integration of identity and access management across multiple cloud environments.

• ZTNA (Zero Trust Network Access): ZTNA is a security model that requires verification of every request to access resources, based on a "never trust, always verify" approach. While it enhances security, it focuses more on providing secure access to applications rather than simplifying the overall integration of identity management systems for a cloud migration.

• SWG (Secure Web Gateway): SWG provides web filtering, malware protection, and secure access to web-based applications. It is useful for protecting users from threats on the web but does not address the specific challenge of integrating identity and access management across cloud-based assets in the context of a migration.