PSE-SASE · Question #26
What are two benefits provided to an organization using a secure web gateway (SWG)? (Choose two.)
The correct answer is B. Security policies for making internet access safer are enforced. C. Access to inappropriate websites or content is blocked based on acceptable use policies. A Secure Web Gateway sits between users and the internet, acting as a policy enforcement point - it inspects outbound web traffic to enforce security policies (B) and block access to inappropriate or malicious content based on acceptable use policies (C). These are the two core…
Question
What are two benefits provided to an organization using a secure web gateway (SWG)? (Choose two.)
Options
- AVPNs remain connected, reducing user risk exposure.
- BSecurity policies for making internet access safer are enforced.
- CAccess to inappropriate websites or content is blocked based on acceptable use policies.
- DAn encrypted challenge-response mechanism obtains user credentials from the browser.
How the community answered
(51 responses)- A4% (2)
- B90% (46)
- D6% (3)
Explanation
A Secure Web Gateway sits between users and the internet, acting as a policy enforcement point - it inspects outbound web traffic to enforce security policies (B) and block access to inappropriate or malicious content based on acceptable use policies (C). These are the two core functions SWGs are designed for: controlling what users can access and ensuring that access complies with organizational rules.
Why the distractors are wrong:
- A is incorrect because SWGs are not VPN technology - they don't manage or maintain VPN connections; that's the role of a VPN gateway or firewall.
- D describes something closer to a NTLM/Kerberos challenge-response or a captive portal authentication mechanism, not a function of an SWG. SWGs may authenticate users, but "encrypted challenge-response to obtain credentials from the browser" is not their defining benefit.
Memory tip: Think of SWG as a "web traffic cop" - it enforces rules (B) and blocks bad destinations (C). If an answer describes SWG doing something unrelated to inspecting/filtering web traffic (like managing VPNs or harvesting credentials), it's a distractor.
Topics
Community Discussion
No community discussion yet for this question.