Jackson & Co., a mid-sized law firm, is concerned about web-based cyber threats. The IT team implements a solution that serves as an intermediary for all HTTP and HTTPS requests. This allows the SOC…

Question

Options

• AWhitelisting
• BBlacklisting
• CWeb content filtering
• DProxy servers

• A
  3% (1)
• B
  3% (1)
• C
  6% (2)
• D
  88% (28)

Explanation

A proxy server acts as an intermediary between users and the internet, routing HTTP/HTTPS requests through a controlled inspection point. This provides visibility (who accessed what, when, from which device) and enables enforcement (block categories, block malicious destinations, inspect headers, apply SSL/TLS inspection where permitted, and enforce acceptable-use policies). While web content filtering is often a feature implemented through proxies or secure web gateways, the question explicitly describes an “intermediary for all HTTP and HTTPS requests,” which is the defining characteristic of a proxy. Whitelisting and blacklisting are policy methods (allow/deny lists) that can be applied within a proxy or firewall, but they are not the architectural containment method described. From a SOC containment standpoint, proxying enables rapid response actions: block newly observed malicious domains/URLs, monitor for beaconing, and prevent users from reaching phishing infrastructure. It also supports investigations by providing centralized web activity logs for correlation with endpoint and identity telemetry. Therefore, the correct option is proxy servers.

No community discussion yet for this question.