CompTIA Cloud+ Practice Test

What configuration control should be implemented to prevent PII from being stored in a SaaS solution?

1. Implement file-level encryption.

2. Implement a network ACL.

3. Implement an IPS.

4. Implement content filtering.

The correct answer is: Implement a network ACL.

To prevent Personally Identifiable Information (PII) from being stored in a SaaS solution, implementing content filtering is the most effective control. This configuration allows for the inspection of data being sent to or received from the SaaS environment by defining rules that identify and block sensitive information, such as PII. Content filtering can be designed to recognize certain patterns or keywords associated with PII and can enforce policies that prevent such data from being uploaded to the SaaS solution. This proactive approach not only helps to minimize the risk of accidental exposure of sensitive data but also aligns with compliance requirements related to data protection. While other controls, such as file-level encryption and network ACLs, are important for overall security, they do not directly prevent the unauthorized storage of sensitive data within SaaS applications. IPS (Intrusion Prevention Systems), while valuable for monitoring and responding to threats, also do not specifically serve the purpose of controlling the data that enters or exits a SaaS environment. Therefore, content filtering stands out as the most targeted and relevant measure for controlling and preventing the storage of PII in cloud-based services.