The Chief Information Security Officer directed a risk reduction in shadow IT and created a policy requiring all
unsanctioned high-risk SaaS applications to be blocked from user access. Which of the following is the BEST
security solution to reduce this risk?


A. CASB
B. VPN concentrator
C. MFA
D. VPC endpoint