Which two drawbacks of direct Internet access at the branch are true? (Choose two)

Question

Options

• Aestablishes less control of sensitive data and applications in the cloud
• Bincreases WAN bandwidth consumption
• Cdegrades application performance
• Dcomplicates securing outbound branch traffic from the corporate HQ location
• Eincreases IT spending

• A
  80% (20)
• B
  4% (1)
• C
  4% (1)
• E
  12% (3)

Explanation

Direct internet access (DIA) at the branch bypasses the centralized security infrastructure at corporate HQ, which is why A and D are correct. With DIA, sensitive cloud-bound traffic never passes through HQ's security stack, giving IT less visibility and control over data (A). Simultaneously, security teams can no longer rely on a single HQ perimeter to inspect all outbound traffic - each branch must now be independently secured, which complicates that HQ-centric model (D).

B is wrong because DIA actually reduces WAN bandwidth by offloading internet traffic locally instead of backhauling it through the corporate WAN. C is wrong because DIA typically improves application performance (especially for SaaS/cloud) by taking a shorter, more direct path to the internet. E is wrong because DIA generally reduces IT spending by lowering dependence on expensive MPLS circuits used for backhauling.

Memory tip: The distractors (B, C, E) are actually benefits of DIA - it saves bandwidth, boosts performance, and cuts costs. The drawbacks are about losing central control - over your data (A) and over your security posture (D). If you remember "DIA = less central control," you'll lock in A and D every time.

No community discussion yet for this question.