A network architect is working on a new network design to better support remote and...

Comprehensive and Detailed Explanation From Exact Extract:

A Secure Web Gateway (SWG) provides cloud-based traffic filtering, URL filtering, SSL decryption, and content inspection without requiring traffic to be routed through an on-premises data center. It is ideal for both remote and hybrid users, enforcing security policies in a distributed environment.

Relevant Extract from CompTIA CloudNetX CNX-001 Study Guide — under “Cloud-Based Security Solutions”:

“Secure Web Gateways allow cloud-hosted decryption and inspection of web traffic, enabling policy enforcement for remote and on-campus users without backhauling traffic to the data center.”

Other options:

B. Transit gateways connect VPCs and on-prem but don’t decrypt traffic.

C. VPNs provide encrypted tunnels but don’t inspect traffic.

D. IPS inspects traffic but is usually on-prem and not cloud-hosted.

E. NAC is used for access control, not traffic inspection.

================================================