exam questions

Exam SY0-601 All Questions

View all questions & answers for the SY0-601 exam

Exam SY0-601 topic 1 question 520 discussion

Actual exam question from CompTIA's SY0-601
Question #: 520
Topic #: 1
[All SY0-601 Questions]

An organization is struggling with scaling issues on its VPN concentrator and internet circuit due to remote work. The organization is looking for a software solution that will allow it to reduce traffic on the VPN and internet circuit, while still providing encrypted tunnel access to the data center and monitoring of remote employee internet traffic. Which of the following will help achieve these objectives?

  • A. Deploying a SASE solution to remote employees
  • B. Building a load-balanced VPN solution with redundant internet
  • C. Purchasing a low-cost SD-WAN solution for VPN traffic
  • D. Using a cloud provider to create additional VPN concentrators
Show Suggested Answer Hide Answer
Suggested Answer: A 🗳️

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
sursur
Highly Voted 1 year, 10 months ago
Selected Answer: A
SASE (Secure Access Service Edge) is a comprehensive networking and security approach that combines wide-area networking (WAN) capabilities with security features. It provides secure access to applications and data, including encrypted tunnel access to the data center, while also offering monitoring capabilities for remote employee internet traffic. By implementing a SASE solution, the organization can reduce traffic on the VPN and internet circuit by routing traffic intelligently through the cloud, closer to the users. This approach helps optimize performance and security, addressing the scaling issues effectively.
upvoted 15 times
...
subaie503
Highly Voted 1 year, 2 months ago
Surely this can't be a real question from an exam right? "SASE" is not in the exam objectives, this is ridiculous
upvoted 11 times
xBrynlee
9 months, 3 weeks ago
I looked it up in the official COMPTIA security+ guidebook and it briefly mentions it in ONE sentence. I'm just going to hope I don't get this question cause wtf. "Enterprise networks often make use of secure web gateways (SWG). An on-premises SWG is a proxy-based firewall, content filter, and intrusion detection/prevention system that mediates user access to Internet sites and services. A next-generation SWG, as marketed by Netskope (netskope.com/products/next-gen-swg), combines the functionality of an SWG with that of data loss prevention (DLP) and a CASB to provide a wholly cloud-hosted platform for client access to websites and cloud apps. This supports an architecture defined by Gartner as secure access service edge (SASE) (scmagazine.com/home/opinion/secure-access-service-edge-sase-key-points-for-earlyadopters)."
upvoted 1 times
...
...
shady23
Most Recent 12 months ago
Selected Answer: A
A. Deploying a SASE solution to remote employees
upvoted 1 times
...
kewokil120
1 year, 2 months ago
Personally Answer D answers the P1 issue of overloaded VPN servers today as it lets you scale to a bigger resource and allows to split users between vpn gateways. A would be longer term answer.
upvoted 1 times
...
fryderyk
1 year, 3 months ago
"The organization is looking for a software solution". Citing Palo Alto: "SASE is a cloud-native architecture".
upvoted 1 times
...
James_Tye
1 year, 6 months ago
Either SASE or SD-WAN seem to be equally correct. SASE is the framework while SD-WAN is the software solution. In reading through CompTIA documentation my vote would be SD-WAN, but who knows...
upvoted 3 times
...
sujon_london
1 year, 7 months ago
Selected Answer: A
A SASE (Secure Access Service Edge) solution is a cloud-based security architecture that combines secure web gateway (SWG), cloud access security broker (CASB), and zero trust network access (ZTNA) into a single solution. SASE can help organizations to reduce traffic on their VPN and internet circuit by: Encrypting all traffic between remote employees and the data center, which can help to reduce bandwidth usage SASE (Secure Access Service Edge) solution to remote employees. SASE is a cloud-based security solution that combines VPN, SD-WAN, and other security features such as firewall, web filtering, and data loss prevention. By deploying SASE, remote employees can directly access the internet and cloud applications without routing all traffic through the VPN concentrator and internet circuit, reducing traffic and improving performance.
upvoted 8 times
ID77
1 year, 2 months ago
Thanks Sujon!
upvoted 1 times
...
TM78
1 year, 2 months ago
This is a great explanation of SASE (pronounced “sassy”). Thanks!
upvoted 1 times
...
...
malibi
1 year, 7 months ago
Selected Answer: B
Building a load-balanced VPN solution with redundant internet. i believe they are more concern on the load. VPN by itself is already secure. i think they need a load balancer to accommodate users bandwidth!
upvoted 2 times
...
benni3c
1 year, 7 months ago
D. Messer's exam notes (3.3): Remote access VPN • On-demand access from a remote device – Software connects to a VPN concentrator • Some software can be configured as always-on
upvoted 1 times
...
NetTech
1 year, 8 months ago
Since SASE is not on the exam objectives, but SASE utilizes SD-WAN technology, would the answer not be SD-WAN?
upvoted 3 times
...
ApplebeesWaiter1122
1 year, 9 months ago
Selected Answer: A
I think it is A??? Even though SASE is NOT ON THE EXAM OBJECTIVES PDF FROM COMPTIA
upvoted 4 times
benni3c
1 year, 7 months ago
I could not find the concept in the exam objectives either!
upvoted 2 times
...
...
Gamsje
1 year, 9 months ago
Is Secure Access Service Edge (SASE) this concept in the Exam Objectives ??? Fu*k
upvoted 5 times
ApplebeesWaiter1122
1 year, 9 months ago
It is not....
upvoted 3 times
...
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago