A network architect is working on a new network design to better support remote and on-campus workers. Traffic needs to be decrypted for inspection in the cloud but is not required to go through the c

The correct answer is A. Secure web gateway. A Secure Web Gateway (SWG) is a cloud-hosted security service that intercepts and inspects user web traffic - including SSL/TLS decryption - without requiring that traffic to backhaul through the company's data center. This makes it ideal for remote workers connecting directly to

Cloud Network Security

Question

A network architect is working on a new network design to better support remote and on-campus workers. Traffic needs to be decrypted for inspection in the cloud but is not required to go through the company's data center. Which of the following technologies best meets these requirements?

Options

ASecure web gateway
BTransit gateway
CVirtual private network
DIntrusion prevention system
ENetwork access control system

How the community answered

(21 responses)

A
76% (16)
C
5% (1)
D
14% (3)
E
5% (1)

Explanation

A Secure Web Gateway (SWG) is a cloud-hosted security service that intercepts and inspects user web traffic - including SSL/TLS decryption - without requiring that traffic to backhaul through the company's data center. This makes it ideal for remote workers connecting directly to the internet via the cloud. A transit gateway (B) connects VPCs and on-premises networks but does not perform deep traffic inspection. A VPN (C) tunnels traffic but typically routes it through the corporate data center, violating the stated requirement. An IPS (D) inspects traffic but is typically an on-premises or inline appliance, not a cloud-native decryption solution. A network access control system (E) manages device admission, not traffic inspection.

Topics

#Secure Web Gateway#Cloud Security#Remote Access Security#Traffic Inspection

Community Discussion

No community discussion yet for this question.

Full CNX-001 Practice