Question: Which security control can best protect against shadow IT by identifying and preventing use of unsanctioned cloud apps and services?

1. intrusion prevention system (IPS)
2. next generation firewall
3. cloud access security broker (CASB)
4. intrusion detection system (IDS)

Answer: The correct answer of the above question is Option C:cloud access security broker (CASB)