CCDE: Cisco Certified Design Expert (Practical) — Question 260

An organization that has an on-prem data center recently underwent expansion where 5000 employees were on-boarded. The organization now needs to upgrade its network security with an ability to perform DPI and filter content based on L4 to L7 data. The network team has decided to adapt a cloud-based security service as a quick solution.

Which solution fulfills the customer requirement?

Answer options

• A. Use Secure Proxy by subscribing to SaaS.
• B. Use IPS provided by a PaaS CSP.
• C. Use FW provided by an IaaS CSP.
• D. Use Secure Web Gateway by subscribing to a PaaS.

Correct answer: D

Explanation

The correct answer is D because a Secure Web Gateway (SWG) is designed to provide content filtering and DPI capabilities across layers 4 to 7, making it suitable for the organization's needs. Options A and B do not specifically address the requirement for DPI or content filtering at those layers, while option C focuses on firewall services that may not offer the same level of content inspection.