Which of the following would be appropriate when considering inbound access security for a web- based SaaS solution?

Antivirus/anti-malware is an endpoint protection tool that defends hosts against malicious software but does not control or encrypt inbound network connections to a SaaS solution.

IPSec operates at the network layer to authenticate and encrypt inbound IP traffic, establishing secure tunnels between clients and the SaaS infrastructure. It provides both confidentiality and integrity for data in transit while verifying the identity of connecting parties. This makes IPSec the correct choice for controlling and securing inbound access to a web-based SaaS environment.

A firewall filters traffic based on rules but does not provide the authenticated, encrypted tunnel mechanism that IPSec uses to secure inbound access at the network layer.

Obfuscation conceals implementation details to deter casual attackers but is not a recognized access security control and provides no authentication or encryption.