7.1 Differentiate Between SaaS Security Inline and SaaS API Security NETWORK-SECURITY-ARCHITECT Practice Questions (Page 2)

Questions 6–10

1. 6application · medium

   A security architect is reviewing the SaaS environment and notices that several Microsoft 365 tenants have external sharing enabled for sensitive folders. The company wants continuous monitoring and automatic remediation of such misconfigurations. Which capability should be implemented?

   • AAdvanced web filtering to block external sharing URLs
   • BAPI-based SaaS security for data at rest
   • CInline SaaS security with DLP rules
   • DSaaS Security Posture Management (SSPM)
   Reveal Solution Discussion Select an answer first
2. 7application · medium

   A company is deploying inline SaaS security to protect users accessing sanctioned cloud apps. They also want to enforce acceptable use policies by blocking access to known malicious websites. Which additional capability should be integrated?

   • ADLP for data at rest
   • BAPI-based SaaS security
   • CSSPM
   • DAdvanced web filtering
   Reveal Solution Discussion Select an answer first
4. 8application · medium

   A company has a hybrid workforce. Remote users connect through a VPN to access sanctioned SaaS apps. The security team wants to enforce DLP on all file uploads to these apps, regardless of the user's device. Which solution should be implemented?

   • AAPI-based SaaS security only
   • BInline SaaS security that inspects all VPN traffic
   • CAdvanced web filtering with a block rule for uploads
   • DSSPM with device compliance policies
   Reveal Solution Discussion Select an answer first
5. 9foundation · easy

   What is the primary purpose of SaaS Security Posture Management (SSPM)?

   • ATo encrypt all data stored in SaaS applications
   • BTo provide a VPN for secure remote access to cloud applications
   • CTo block malware in real time as users upload files to SaaS apps
   • DTo continuously assess SaaS application configurations for misconfigurations and compliance risks
   Reveal Solution Discussion Select an answer first
6. 10application · medium

   A company uses Microsoft 365 and Salesforce. Security wants to block malware downloads from personal webmail and prevent users from uploading files with credit card numbers to a sanctioned collaboration app. Which approach should the security architect recommend?

   • AEnable API-based SaaS security for Microsoft 365 and Salesforce to scan files at rest.
   • BDeploy inline SaaS security for real-time inspection of user traffic to both sanctioned and unsanctioned apps.
   • CUse advanced web filtering to block all access to personal webmail and collaboration apps.
   • DConfigure SSPM to continuously assess misconfigurations in Microsoft 365 and Salesforce.
   Reveal Solution Discussion Select an answer first