Exam SY0-601 topic 1 question 496 discussion

For those wondering why it is not WAF, i rationalise it as the following: WAF defends against malicious incoming requests/traffic which is not the case here. The company does not have the web servers of websites employees visit on the internet so WAF is not the right defense mechanism.

An internet proxy (also known as a web proxy) would best meet the requirements of restricting web access and monitoring the websites that employees visit. An internet proxy acts as an intermediary between the users' web browsers and the internet. When employees access the internet through the proxy server, it can be configured to enforce access control policies, filter web content, and log user activities. Here's how an internet proxy can fulfill the requirements: Restrict web access: The proxy server can be configured with access control lists (ACLs) to block or allow access to specific websites or categories of websites based on company policies. This allows the organization to restrict access to inappropriate or non-work-related websites. Monitor website visits: The proxy server logs all web requests made by employees, providing detailed information about the websites they visit, the time of access, and the amount of data transferred. This monitoring helps the company track user activities and identify potential security risks or policy violations.

I have worked in IT for more than 15 years, and I still almost missed this one: "restrict web access and monitor the websites that employees visit" The correct answer should have been "a Proxy Server." So, the closest one is Option A.

Trash question. The only reason I stick with internet proxy is because a firewall still needs to proxy HTTPS traffic to inspect it since it's encrypted (SSL Inspection). All decent firewalls have SSL inspection though, which is why this is a trash question. POV: Third-year firewall technician

Internet Proxy

A. Internet proxy

Why not a Firewall? A NGFW can do whats requested...

I choose A. Internet proxy

Proxy Servers Many networks use proxy servers (or forward proxy servers) to forward requests for services (such as HTTP or HTTPS) from clients. They can improve performance by caching content, and some proxy servers can restrict users’ access to inappropriate websites by filtering content." -Security+ SY0-601 Get Certified Get Ahead by Darril Gibson

Internet proxies also monitors which websites employees visit besides protecting pc from the outside.

This is exactly what a http proxy does.

Proxy - policies to restrict access to certain websites or categories of websites based on predefined rules.

C. WAF: A WAF protects your web apps by filtering, monitoring, and blocking any malicious HTTP/S traffic traveling to the web application, and prevents any unauthorized data from leaving the app.

Going with WAF on this one as a WAF can be used to alert, protect against attacks, block traffic and monitor traffic