Exam CAS-004 topic 1 question 380 discussion

Actual exam question from CompTIA's CAS-004

Question #: 380
Topic #: 1

A bank hired a security architect to improve its security measures against the latest threats. The solution must meet the following requirements:

• Recognize and block fake websites.
• Decrypt and scan encrypted traffic on standard and non-standard ports.
• Use multiple engines for detection and prevention.
• Have central reporting.

Which of the following is the BEST solution the security architect can propose?

A. CASB
B. Web filtering
C. NGFW
D. EDR

Show Suggested Answer

Suggested Answer: C 🗳️

by biggytech at Nov. 19, 2023, 11:49 p.m.

Comments

Submit Cancel

041ba31

7 months ago

Selected Answer: C

The best answer is C. NGFW (Next-Generation Firewall). An NGFW can recognize and block fake websites, decrypt and scan encrypted traffic on both standard and non-standard ports, use multiple engines for detection and prevention, and provide central reporting, meeting all the specified requirements.

upvoted 1 times

...

Anarckii

1 year ago

Selected Answer: C

C. NGFW - meets all the requirements https://www.zenarmor.com/docs/network-security-tutorials/what-are-the-advantages-of%20next-generation-firewall-over-traditional-firewall

upvoted 3 times

...

OdinAtlasSteel

1 year ago

Selected Answer: C

While other options like CASB (Cloud Access Security Broker), Web Filtering, and EDR (Endpoint Detection and Response) have their strengths in specific areas of security, a Next-Generation Firewall (NGFW) is a comprehensive solution that aligns well with the listed requirements. NGFWs are known for their versatility in handling various security functionalities, making them a suitable choice for enhancing overall security posture by offering advanced threat detection, content inspection, and centralized management capabilities.

upvoted 4 times

...

biggytech

1 year, 1 month ago

Selected Answer: C

C is correct

upvoted 3 times

...