CAS-004 Security Architecture Practice Question
A security architect is evaluating a SASE solution. Which component of SASE is primarily responsible for inspecting encrypted traffic for threats?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Secure web gateway (SWG)
SASE integrates SWG (Secure Web Gateway) for web filtering and threat inspection, including decryption and inspection of TLS traffic.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Zero Trust Network Access (ZTNA)
Why it's wrong here
ZTNA provides access control, not traffic inspection.
- ✗
Next-generation firewall (NGFW)
Why it's wrong here
NGFW is part of SASE but not specifically for TLS inspection; SWG is more accurate.
- ✓
Secure web gateway (SWG)
Why this is correct
Correct – SWG performs deep packet inspection on encrypted traffic.
- ✗
SD-WAN edge
Why it's wrong here
SD-WAN focuses on connectivity and routing.
Visual reference
Go deeper
Related to this question
About these practice questions
Courseiva writes every CAS-005 question from scratch — 968 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This CAS-005 practice question is part of Courseiva's free CompTIA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the CAS-005 exam.