nerdexam
CompTIA

CV0-002 · Question #431

A cloud-based web proxy is blocking key sites that a business requires for operation. After validation, the sites are legitimate, and access is required for end users to complete their work. Which…

The correct answer is B. Whitelist the URLs. The best solution to allow access to legitimate sites blocked by a cloud-based web proxy is to whitelist the URLs, ensuring access while maintaining the proxy's security functions.

Security

Question

A cloud-based web proxy is blocking key sites that a business requires for operation. After validation, the sites are legitimate, and access is required for end users to complete their work. Which of the following is the BEST solution to allow access to the sites?

Options

  • AInstruct users to bypass the cloud-based web proxy.
  • BWhitelist the URLs.
  • CBlacklist the URLs.
  • DCreate a security group for those users and enforce MFA.

How the community answered

(64 responses)
  • A
    5% (3)
  • B
    88% (56)
  • C
    6% (4)
  • D
    2% (1)

Why each option

The best solution to allow access to legitimate sites blocked by a cloud-based web proxy is to whitelist the URLs, ensuring access while maintaining the proxy's security functions.

AInstruct users to bypass the cloud-based web proxy.

Instructing users to bypass the cloud-based web proxy undermines the entire security purpose of having a proxy and can expose the network to unmanaged risks.

BWhitelist the URLs.Correct

Whitelisting the URLs specifically instructs the cloud-based web proxy to permit access to those validated, legitimate sites that were previously blocked. This is the most direct and secure method to ensure necessary business access while maintaining the protective function of the proxy for other, unapproved sites.

CBlacklist the URLs.

Blacklisting URLs specifically prevents access to malicious or unwanted sites; it would further block, not allow, access to the required legitimate sites.

DCreate a security group for those users and enforce MFA.

Creating a security group for users and enforcing MFA enhances user authentication and authorization but does not directly control URL access through a web proxy or resolve the issue of legitimate sites being blocked.

Concept tested: Web proxy URL filtering and access control

Source: https://learn.microsoft.com/en-us/azure/architecture/guide/networking/vpn-filtering#web-filtering

Topics

#Web proxy#Access control#Whitelisting#Network security

Community Discussion

No community discussion yet for this question.

Full CV0-002 Practice