Which feature of a CASB allows for centralized management of access controls from the enterprise network to cloud services?

The feature of a Cloud Access Security Broker (CASB) that allows for centralized management of access controls from the enterprise network to cloud services is Single Sign-On (SSO). SSO enables users to authenticate once and gain access to multiple cloud applications without needing to log in repeatedly. This centralized approach streamlines the management of authentication and authorization processes, making it easier for administrators to enforce policies and manage user access across various applications.

By implementing SSO, organizations can enhance security by reducing the proliferation of credentials and enabling stronger authentication methods. Additionally, SSO allows for better visibility into user access patterns and simplifies the user experience, as employees do not have to remember multiple passwords for different services. This centralized control is crucial in managing access to cloud services effectively, aligning with the needs of an organization seeking to maintain security in a multi-cloud environment.

In contrast, the other options focus on different functionalities that do not directly pertain to the centralized management of access. Data Exfiltration Mitigation is about preventing unauthorized data transfers, Configuration Management pertains to maintaining system consistency and standards over time, and Antivirus (AV) is primarily concerned with identifying and removing malware rather than managing access controls.