A clinic firewall inspects guest web. Staff SaaS skips that firewall and goes to a cloud security provider before the application. Which model is the staff SaaS path?
Select an answer to reveal the explanation.
Short Explanation
The clinic firewall is for the guests, and staff SaaS takes a different first stop. You send that staff traffic through the cloud security provider, which is indirect access. Owning a firewall does not make every path direct.
Full Explanation
Indirect access puts a cloud security provider between the user and the SaaS application. Staff SaaS skips the clinic firewall and hits that provider first, so the staff path is indirect. Direct access would leave toward the application without the provider, whether or not some other flow uses the local firewall. The centralized model would backhaul staff SaaS to an office internet gateway, and this path does not. Dedicated connectivity would be a private circuit to the application, and none was ordered. Exam caveat: the guest path can stay direct, or local, without renaming the staff path. Judge the path the question asks about. Operational check: a staff SaaS session should hit the cloud security provider and should not appear on the clinic firewall, while guest web still should.