Which three are attack vectors protected by Web Security? (Choose three.)

Question

Options

• AMobile
• BSaaSapps
• CWeb
• DEndpoints
• EVoicemail
• FCloud apps

• A
  88% (23)
• E
  8% (2)
• F
  4% (1)

Explanation

Web Security solutions are designed to protect against threats that traverse web-based traffic channels - specifically web browsing (C), mobile devices accessing the internet (A), and endpoints like laptops and desktops that initiate web connections (D). These three vectors all share the common trait of generating HTTP/HTTPS traffic that a web security proxy or gateway can inspect and filter.

Why the distractors are wrong:

• B (SaaS apps) - SaaS app protection typically falls under CASB (Cloud Access Security Broker) solutions, not web security specifically.
• E (Voicemail) - Voicemail is an email/unified communications security concern, entirely outside the web traffic layer.
• F (Cloud apps) - Like SaaS, cloud app security is typically handled by cloud security posture management (CSPM) or CASB tools, not web security gateways.

Memory tip: Think "WEM" - Web browsing, Endpoints, Mobile. These are the three surfaces where users browse the internet and where a web security proxy sits in the traffic path. Anything that doesn't generate inspectable web traffic (voicemail, cloud/SaaS management) belongs to a different security layer.

No community discussion yet for this question.