7.1 Differentiate Between SaaS Security Inline and SaaS API Security NETWORK-SECURITY-ARCHITECT Practice Questions (Page 1)

Questions 1–5

1. 1foundation · easy

   Which statement best describes how inline SaaS security inspects traffic?

   • AIt relies on the SaaS provider's native logging to detect threats after the data has been uploaded.
   • BIt uses a cloud access security broker to review configuration settings of the SaaS app on a scheduled basis.
   • CIt examines traffic in real time as it flows between users and cloud applications, applying policy before the data reaches the app.
   • DIt connects to the SaaS application's API to periodically scan stored files and emails.
   Reveal Solution Discussion Select an answer first
2. 2foundation · easy

   How does enterprise DLP typically integrate with inline SaaS security?

   • ABy scanning data at rest in the SaaS app via API
   • BBy inspecting data in motion and blocking policy violations before they reach the cloud app
   • CBy providing a web filtering proxy that blocks access to all cloud apps
   • DBy periodically reviewing the SaaS app's configuration settings
   Reveal Solution Discussion Select an answer first
4. 3foundation · easy

   Which capability is a primary advantage of API-based SaaS security over inline inspection?

   • AIt eliminates the need for encryption on data stored in the cloud.
   • BIt can block malicious files before they are uploaded to the cloud app.
   • CIt provides real-time policy enforcement on every user request.
   • DIt can scan data that was uploaded from any device, even if that traffic did not pass through the corporate network.
   Reveal Solution Discussion Select an answer first
5. 4foundation · easy

   Which activity is an example of SSPM in action?

   • ADecrypting TLS traffic to inspect web requests
   • BScanning a file in SharePoint Online for credit card numbers
   • CDetecting that a SaaS app has external sharing enabled and alerting the administrator
   • DBlocking a user from uploading a file to a personal Dropbox account
   Reveal Solution Discussion Select an answer first
6. 5application · medium

   A company wants to block users from accessing personal cloud storage apps (e.g., Dropbox) while allowing access to sanctioned apps. They also want to prevent data exfiltration via web uploads. Which solution should they implement?

   • ASSPM to disable personal storage apps
   • BAPI-based SaaS security for all cloud apps
   • CInline SaaS security only
   • DAdvanced web filtering to block personal storage categories, combined with inline DLP for uploads
   Reveal Solution Discussion Select an answer first