3.3 Explain the Security Function of Common Technologies CYBERSECURITY-PRACTITIONER Practice Questions (Page 3)

Questions 11–15

1. 11expert · hard

   A company has a mix of legacy and modern web applications. Some legacy applications are incompatible with modern browsers and require Internet Explorer mode. The company wants to protect all web traffic from malware and enforce data protection policies, but they cannot deploy an enterprise browser to all endpoints due to compatibility issues. Which approach best meets these constraints?

   • ADeploy a Cloud Access Security Broker (CASB) for all web traffic
   • BDeploy Remote Browser Isolation (RBI) for legacy applications only
   • CDeploy an enterprise browser on all endpoints
   • DDeploy a Secure Web Gateway (SWG) for all web traffic
   Reveal Solution Discussion Select an answer first
2. 12foundation · easy

   Which statement best describes the primary function of a Secure Web Gateway (SWG)?

   • AIt encrypts data at rest on endpoint devices to prevent unauthorized access.
   • BIt provides a virtual private network tunnel for remote users to access internal resources.
   • CIt scans email attachments for malware before they reach the user's inbox.
   • DIt filters and monitors outbound web traffic to enforce security policies and block malicious content.
   Reveal Solution Discussion Select an answer first
4. 13foundation · easy

   Which of the following is a key capability provided by a Cloud Access Security Broker (CASB)?

   • AManaging the organization's DNS records.
   • BEncrypting all data stored in the cloud provider's data centers.
   • CVisibility into shadow IT usage of cloud applications.
   • DProviding a firewall for the organization's on-premises network.
   Reveal Solution Discussion Select an answer first
5. 14foundation · easy

   Which of the following is a security control that an enterprise browser can enforce directly within the browser?

   • AProviding a firewall for the local network.
   • BManaging the organization's DNS records.
   • CBlocking the download of sensitive files to unmanaged devices.
   • DEncrypting the entire hard drive of the user's computer.
   Reveal Solution Discussion Select an answer first
6. 15expert · hard

   A company has a legacy web application that is critical to operations but is known to be vulnerable to cross-site scripting (XSS). They cannot patch the application for six months. They need to allow employees to use the application while protecting their endpoints from XSS attacks. They also need to prevent employees from exfiltrating customer data from the application via copy/paste. Which approach best meets these conflicting requirements?

   • AUse a Secure Web Gateway (SWG) to block the application until it is patched
   • BDeploy Remote Browser Isolation (RBI) for the application and enable copy/paste controls
   • CDeploy an enterprise browser with a built-in XSS filter
   • DImplement a Data Loss Prevention (DLP) system to block copy/paste
   Reveal Solution Discussion Select an answer first