Cisco CCNP Security Core (SCOR) 350-701Content SecurityEasy
A security engineer is designing a content security architecture for an organization with a hybrid workforce, including remote users and branch offices, all requiring consistent security policies and threat protection. The solution must integrate network security functions like secure web gateway (SWG), cloud access security broker (CASB), and zero-trust network access (ZTNA) into a unified cloud-native platform. Which architectural model best fits these requirements?
- ASecure Access Service Edge (SASE)
- BOn-premises Unified Threat Management (UTM)
- CDistributed Firewall Deployment
- DTraditional Perimeter Security
Show answer & explanationAnswer & explanation
Correct answer: A. Secure Access Service Edge (SASE)
SASE (Secure Access Service Edge) is designed to consolidate various network and security functions, such as SWG, CASB, and ZTNA, into a single, cloud-native platform. This model is ideal for hybrid workforces and distributed environments, providing consistent security policies regardless of user location.
Why the other options are wrong
- B. On-premises UTM appliances struggle to provide consistent security for remote users and branch offices without complex VPNs and backhauling.
- C. Distributed Firewall Deployment focuses on network segmentation and access control but does not inherently integrate SWG, CASB, and ZTNA as a unified cloud service.
- D. Traditional Perimeter Security is ill-suited for hybrid workforces and lacks the cloud-native integration required.
Secure Access Service Edge (SASE)
A cloud-native architecture that converges network and security functions into a single, global, and scalable service delivered from the cloud.
- Combines SWG, CASB, ZTNA, Firewall as a Service (FWaaS), and SD-WAN.
- Provides consistent security and network performance for all users, regardless of location.
- Reduces complexity and cost by consolidating multiple point products.
Memory trick: SASE: 'Secure Access Service Edge' is the 'Swiss Army Knife Everywhere' for modern security.