What is a benefit of deploying secure access service edge (SASE) with a secure web gateway (SWG) over a SASE solution without a SWG?

Question

Options

• AA heartbeat connection between the firewall peers ensures seamless failover in the event that a
• BIt prepares the keys and certificates required for decryption, creating decryption profiles and
• CProtection is offered in the cloud through a unified platform for complete visibility and precise
• DIt creates tunnels that allow users and systems to connect securely over a public network as if

• A
  14% (4)
• B
  4% (1)
• C
  79% (22)
• D
  4% (1)

Explanation

Option C is correct because SWG's primary value within a SASE architecture is delivering cloud-based web security through a unified platform - providing complete visibility into web traffic and precise policy control (URL filtering, malware inspection, data loss prevention) for all users regardless of location. Without SWG, SASE lacks dedicated web traffic inspection and enforcement capabilities.

Why the distractors are wrong:

• A describes high-availability (HA) firewall failover via heartbeat - a feature of redundant firewall pairs, unrelated to SWG.
• B describes SSL/TLS decryption profile setup - a supporting technical step, not the defining benefit of adding SWG to SASE.
• D describes VPN tunnel functionality (private connectivity over public networks) - that's a core SASE/ZTNA capability, not specific to SWG.

Memory tip: Think of SWG as the "web cop" in SASE - it watches and controls all web traffic from the cloud. The keyword in option C is "unified platform" + "visibility" - SWG's job is to see and enforce, which maps directly to "complete visibility and precise [control]."

No community discussion yet for this question.