What feature on the WSA provides Day Zero Revocation of access to third party sites such as Salesforce?

Question

Options

• AApplication Visibility and Control
• BSaaS Access Control
• CDynamic Vectoring and Streaming engine
• DDay Zero Revocation engine

• A
  4% (2)
• B
  93% (50)
• C
  2% (1)
• D
  2% (1)

Explanation

SaaS Access Control is correct because it is the specific WSA feature designed to manage and enforce access policies for cloud-based SaaS applications (like Salesforce, Box, or Office 365), including the ability to immediately revoke user access on Day Zero - meaning no waiting for signature updates or policy sync cycles.

Why the distractors are wrong:

• A. Application Visibility and Control (AVC) identifies and categorizes application traffic for policy enforcement, but it does not provide SaaS-specific revocation capabilities.
• C. Dynamic Vectoring and Streaming (DVS) engine is the WSA's underlying malware-scanning engine - it inspects content for threats, not access privileges to external SaaS platforms.
• D. Day Zero Revocation engine sounds convincing but is fabricated - no such named engine exists on the WSA; this is a classic exam trap that mirrors the question's own terminology.

Memory tip: Think "SaaS controls SaaS." If the question involves a cloud service (Salesforce, Dropbox, etc.) and access revocation, SaaS Access Control is your answer. Whenever you see "Day Zero" + "third-party site," map it to the feature that literally has "SaaS" in its name.

No community discussion yet for this question.