A cloud-based web proxy is blocking key sites that a business requires for operation. After validation, the sites are legitimate, and access is required for end users to complete their work. Which of

Instructing users to bypass the proxy removes all filtering protections for those users, creating a broad security gap rather than a targeted exception for specific sites.

Whitelisting the URLs adds the validated legitimate sites to an explicit allow list within the cloud-based web proxy, permitting only those specific destinations while keeping all other proxy filtering rules intact. This is the principle of least-privilege access - granting only the specific access needed. It maintains the security posture of the proxy while resolving the business access requirement.

Blacklisting the URLs would add them to a block list, which further denies access rather than allowing it, achieving the opposite of the desired outcome.

Creating a security group and enforcing MFA addresses authentication strength but does not resolve the proxy blocking rule that is preventing access to the sites.