A security engineer needs to implement content security for a remote workforce that uses various devices (laptops, tablets, smartphones) to access both corporate on-premise resources and cloud applications. The solution must ensure that all traffic is inspected for threats and adheres to company policies, regardless of the user's location or network. Which content security strategy would be most effective and scalable for this scenario?
- AProviding a dedicated hardware security appliance to each remote user.
- BUtilizing a host-based firewall and antivirus on each remote device.
- CImplementing a SASE (Secure Access Service Edge) architecture with integrated security services.
- DDeploying VPN clients on all devices to backhaul traffic to a central data center for inspection.
Show answer & explanationAnswer & explanation
Correct answer: C. Implementing a SASE (Secure Access Service Edge) architecture with integrated security services.
SASE (Secure Access Service Edge) is an architectural model that combines network and security services (like SWG, CASB, FWaaS, ZTNA) into a single, cloud-native platform. It is specifically designed to provide consistent, location-independent security to remote and mobile users accessing both on-premise and cloud resources, making it highly effective and scalable for a remote workforce.
Why the other options are wrong
- A. Providing dedicated hardware appliances to each remote user is cost-prohibitive, complex to manage, and impractical for a mobile workforce and diverse device types.
- B. Host-based firewalls and antivirus are essential but provide only endpoint-level protection and lack centralized policy enforcement or visibility into cloud application usage.
- D. Backhauling all traffic via VPN to a central data center introduces significant latency and scalability challenges for a large remote workforce, especially when accessing cloud applications.
SASE (Secure Access Service Edge)
A cloud-native architectural model that converges networking (SD-WAN) and security (FWaaS, SWG, CASB, ZTNA) into a single, global, cloud-delivered service to secure distributed workforces and cloud-first enterprises.
- Delivers security services from the cloud edge, close to the user.
- Ensures consistent security policies for all users, on any device, anywhere.
- Reduces complexity, improves performance, and enhances agility for remote work.
Memory trick: SASE Secures All, Seamlessly Everywhere.