400-007: Cisco Certified Design ExpertDemo

By Cisco · Question Mode

QuestionQ317

Security Design

An organization with an on-premises data center recently expanded and onboarded 5000 employees. It now needs to upgrade its network security with the ability to perform DPI and filter content based on L4 through L7 data. The network team has decided to adopt a cloud-based security service as a quick solution.

Which solution meets the customer requirement?

  • A Use Secure Proxy by subscribing to SaaS.
  • B Use IPS provided by a PaaS CSP.
  • C Use FW provided by an IaaS CSP.
  • D Use Secure Web Gateway by subscribing to a PaaS.
Explanation

A SaaS secure proxy can be deployed as a cloud-delivered security control that inspects traffic and enforces granular web, URL, application, and content policies. Cloud secure web gateway/proxy services support TLS inspection and application-layer filtering, making them suitable for scalable L4–L7 inspection without deploying new on-premises security infrastructure.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!