Exam CNX-001 Topic 2 Question 1 Discussion
Actual exam question for CompTIA's CNX-001 exam
Question #: 1
Topic #: 2
Question #: 1
Topic #: 2
A network architect is working on a new network design to better support remote and on-campus workers.
Traffic needs to be decrypted for inspection in the cloud but is not required to go through the company's data center. Which of the following technologies best meets these requirements?
Traffic needs to be decrypted for inspection in the cloud but is not required to go through the company's data center. Which of the following technologies best meets these requirements?
Suggested Answer: A Vote an answer
Comprehensive and Detailed Explanation From Exact Extract:
A Secure Web Gateway (SWG) provides cloud-based traffic filtering, URL filtering, SSL decryption, and content inspection without requiring traffic to be routed through an on-premises data center. It is ideal for both remote and hybrid users, enforcing security policies in a distributed environment.
Relevant Extract from CompTIA CloudNetX CNX-001 Study Guide - under "Cloud-Based Security Solutions":
"Secure Web Gateways allow cloud-hosted decryption and inspection of web traffic, enabling policy enforcement for remote and on-campus users without backhauling traffic to the data center." Other options:
* B. Transit gateways connect VPCs and on-prem but don't decrypt traffic.
* C. VPNs provide encrypted tunnels but don't inspect traffic.
* D. IPS inspects traffic but is usually on-prem and not cloud-hosted.
* E. NAC is used for access control, not traffic inspection.
A Secure Web Gateway (SWG) provides cloud-based traffic filtering, URL filtering, SSL decryption, and content inspection without requiring traffic to be routed through an on-premises data center. It is ideal for both remote and hybrid users, enforcing security policies in a distributed environment.
Relevant Extract from CompTIA CloudNetX CNX-001 Study Guide - under "Cloud-Based Security Solutions":
"Secure Web Gateways allow cloud-hosted decryption and inspection of web traffic, enabling policy enforcement for remote and on-campus users without backhauling traffic to the data center." Other options:
* B. Transit gateways connect VPCs and on-prem but don't decrypt traffic.
* C. VPNs provide encrypted tunnels but don't inspect traffic.
* D. IPS inspects traffic but is usually on-prem and not cloud-hosted.
* E. NAC is used for access control, not traffic inspection.
by Mick at Jun 22, 2025, 02:59 AM
0
0
0
10
Comments
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
Report Comment
Commenting
You can sign-up / login (it's free).