nerdexam
CompTIA

SY0-701 · Question #552

An enterprise security team is researching a new security architecture to better protect the company's networks and applications against the latest cyberthreats. The company has a fully remote workfor

The correct answer is C. SASE. SASE (Secure Access Service Edge) is the correct answer because it is a cloud-delivered architecture that combines SD-WAN, VPN, and integrated security services - including a software-defined firewall - into a single, globally redundant solution purpose-built for remote workforce

Submitted by jian89· Mar 6, 2026Security architecture

Question

An enterprise security team is researching a new security architecture to better protect the company's networks and applications against the latest cyberthreats. The company has a fully remote workforce. The solution should be highly redundant and enable users to connect to a VPN with an integrated, software-based firewall. Which of the following solutions meets these requirements?

Options

  • AIPS
  • BSIEM
  • CSASE
  • DCASB

How the community answered

(59 responses)
  • A
    3% (2)
  • B
    17% (10)
  • C
    71% (42)
  • D
    8% (5)

Explanation

SASE (Secure Access Service Edge) is the correct answer because it is a cloud-delivered architecture that combines SD-WAN, VPN, and integrated security services - including a software-defined firewall - into a single, globally redundant solution purpose-built for remote workforces connecting from anywhere.

Why the distractors are wrong:

  • A. IPS (Intrusion Prevention System) is a point solution that inspects and blocks malicious traffic; it does not provide VPN connectivity or serve as a broad network architecture.
  • B. SIEM (Security Information and Event Management) aggregates and correlates logs/events for threat detection and alerting - it is a monitoring tool, not a connectivity or firewall solution.
  • D. CASB (Cloud Access Security Broker) enforces security policies between users and cloud services, but it does not provide VPN access or act as a full network security architecture.

Memory tip: Think of SASE as "Security As a Service at the Edge" - it bundles VPN + firewall + cloud security into one service delivered from the edge, which is exactly what a fully remote company needs.

Topics

#SASE#Security Architecture#Remote Workforce Security#Cloud Security

Community Discussion

No community discussion yet for this question.

Full SY0-701 Practice