Exam SY0-701 topic 1 question 544 discussion

Actual exam question from CompTIA's SY0-701

Question #: 544
Topic #: 1

A Chief Information Security Officer (CISO) wants to:

• Prevent employees from downloading malicious content.
• Establish controls based on departments and users.
• Map internet access for business applications to specific service accounts.
• Restrict content based on categorization.

Which of the following should the CSO implement?

A. Web application firewall
B. Secure DNS server
C. Jump server
D. Next-generation firewall

Show Suggested Answer

Suggested Answer: D 🗳️

by Anyio at Jan. 28, 2025, 5:30 p.m.

Comments

Submit Cancel

Anyio

3 months ago

Selected Answer: D

D. Next-generation firewall Explanation: A Next-generation firewall (NGFW) is the most appropriate solution for the CISO's requirements. NGFWs provide advanced features such as: Content filtering to prevent employees from downloading malicious content. User and department-based controls to enforce policies tailored to specific groups. Application-level controls to map internet access for business applications to specific service accounts. Category-based filtering to restrict access to websites or content based on predefined categories. Web application firewall (A) is designed to protect web applications from attacks but does not provide the broad range of controls needed for the CISO's requirements. Jump server (C) is used for secure access to internal systems and does not address content filtering or internet access controls.

upvoted 1 times

...