156-561 · Question #7
Which Security Gateway function inspects cloud applications and workload resources for malicious activity?
The correct answer is B. Threat Prevention. Threat Prevention (B) is correct because it is the Security Gateway blade specifically designed to inspect traffic - including cloud application workloads - for malicious activity such as malware, intrusions, exploits, and zero-day threats using technologies like IPS, anti-bot…
Question
Which Security Gateway function inspects cloud applications and workload resources for malicious activity?
Options
- AApplication Control
- BThreat Prevention
- CIdentity Awareness
- DAccess Control
How the community answered
(26 responses)- A8% (2)
- B88% (23)
- C4% (1)
Explanation
Threat Prevention (B) is correct because it is the Security Gateway blade specifically designed to inspect traffic - including cloud application workloads - for malicious activity such as malware, intrusions, exploits, and zero-day threats using technologies like IPS, anti-bot, antivirus, and sandboxing.
- A (Application Control) is wrong because it identifies and controls which applications users can access, not whether those applications carry threats.
- C (Identity Awareness) is wrong because it maps network traffic to specific users/groups to enforce identity-based policy - it has no inspection role for malicious content.
- D (Access Control) is wrong because it governs who or what can connect to resources (firewall rules, VPN, URL filtering) - it permits or denies, but does not inspect for active threats.
Memory tip: Think of the word "Prevention" - you prevent malicious activity by actively inspecting and blocking it. The other three blades all manage access or identity, but only Threat Prevention actively hunts for attacks.
Topics
Community Discussion
No community discussion yet for this question.