Exam SY0-601 All Questions

View all questions & answers for the SY0-601 exam

Exam SY0-601 topic 1 question 520 discussion

Actual exam question from CompTIA's SY0-601

Question #: 520
Topic #: 1

An organization is struggling with scaling issues on its VPN concentrator and internet circuit due to remote work. The organization is looking for a software solution that will allow it to reduce traffic on the VPN and internet circuit, while still providing encrypted tunnel access to the data center and monitoring of remote employee internet traffic. Which of the following will help achieve these objectives?

A. Deploying a SASE solution to remote employees
B. Building a load-balanced VPN solution with redundant internet
C. Purchasing a low-cost SD-WAN solution for VPN traffic
D. Using a cloud provider to create additional VPN concentrators

Show Suggested Answer

Suggested Answer: A 🗳️

by sursur at July 5, 2023, 3:12 a.m.

Comments

Submit Cancel

sursur

Highly Voted 2 years, 1 month ago

Selected Answer: A

SASE (Secure Access Service Edge) is a comprehensive networking and security approach that combines wide-area networking (WAN) capabilities with security features. It provides secure access to applications and data, including encrypted tunnel access to the data center, while also offering monitoring capabilities for remote employee internet traffic. By implementing a SASE solution, the organization can reduce traffic on the VPN and internet circuit by routing traffic intelligently through the cloud, closer to the users. This approach helps optimize performance and security, addressing the scaling issues effectively.

upvoted 15 times

...

subaie503

Highly Voted 1 year, 5 months ago

Surely this can't be a real question from an exam right? "SASE" is not in the exam objectives, this is ridiculous

upvoted 11 times

xBrynlee

1 year, 1 month ago

I looked it up in the official COMPTIA security+ guidebook and it briefly mentions it in ONE sentence. I'm just going to hope I don't get this question cause wtf. "Enterprise networks often make use of secure web gateways (SWG). An on-premises SWG is a proxy-based firewall, content filter, and intrusion detection/prevention system that mediates user access to Internet sites and services. A next-generation SWG, as marketed by Netskope (netskope.com/products/next-gen-swg), combines the functionality of an SWG with that of data loss prevention (DLP) and a CASB to provide a wholly cloud-hosted platform for client access to websites and cloud apps. This supports an architecture defined by Gartner as secure access service edge (SASE) (scmagazine.com/home/opinion/secure-access-service-edge-sase-key-points-for-earlyadopters)."

upvoted 1 times

...

shady23

Most Recent 1 year, 3 months ago

Selected Answer: A

A. Deploying a SASE solution to remote employees

upvoted 1 times

...

kewokil120

1 year, 6 months ago

Personally Answer D answers the P1 issue of overloaded VPN servers today as it lets you scale to a bigger resource and allows to split users between vpn gateways. A would be longer term answer.

upvoted 1 times

...

fryderyk

1 year, 7 months ago

"The organization is looking for a software solution". Citing Palo Alto: "SASE is a cloud-native architecture".

upvoted 1 times

...

James_Tye

1 year, 10 months ago

Either SASE or SD-WAN seem to be equally correct. SASE is the framework while SD-WAN is the software solution. In reading through CompTIA documentation my vote would be SD-WAN, but who knows...

upvoted 3 times

...

sujon_london

1 year, 11 months ago

Selected Answer: A

A SASE (Secure Access Service Edge) solution is a cloud-based security architecture that combines secure web gateway (SWG), cloud access security broker (CASB), and zero trust network access (ZTNA) into a single solution. SASE can help organizations to reduce traffic on their VPN and internet circuit by: Encrypting all traffic between remote employees and the data center, which can help to reduce bandwidth usage SASE (Secure Access Service Edge) solution to remote employees. SASE is a cloud-based security solution that combines VPN, SD-WAN, and other security features such as firewall, web filtering, and data loss prevention. By deploying SASE, remote employees can directly access the internet and cloud applications without routing all traffic through the VPN concentrator and internet circuit, reducing traffic and improving performance.

upvoted 8 times

ID77

1 year, 5 months ago

Thanks Sujon!

upvoted 1 times

...

TM78

1 year, 5 months ago

This is a great explanation of SASE (pronounced “sassy”). Thanks!

upvoted 1 times

...

malibi

1 year, 11 months ago

Selected Answer: B

Building a load-balanced VPN solution with redundant internet. i believe they are more concern on the load. VPN by itself is already secure. i think they need a load balancer to accommodate users bandwidth!

upvoted 2 times

...

benni3c

1 year, 11 months ago

D. Messer's exam notes (3.3): Remote access VPN • On-demand access from a remote device – Software connects to a VPN concentrator • Some software can be configured as always-on

upvoted 1 times

...