Which Browsing Protection Fits?

About this interactive

Web browsing is risky because the browser connects to servers it has never seen and runs the code they send. The module answers with several protections, each working at a different point. A PKI certificate check happens when the connection starts: the server's certificate, verified up to a root on your machine, proves the site holds the private key for its domain, and HTTPS then keeps pages from being read or changed on the way. It does not prove the site is safe. Web filtering looks at the request and the response, through an agent, a proxy, a monitor or an inline device. It sees the full address, path and query included, can scan for URL tricks, and can read and check the content that comes back. Browser isolation lets the page run on an intermediary server and sends the user only images, so the page's code never reaches the machine. DNS filtering acts at the name lookup: a blocked name resolves to a block page's address, so no connection to the site is made. It sees only names, not paths or content.

What you'll learn

Choose the protection that meets a web browsing need: a PKI certificate check, web filtering, browser isolation or DNS filtering
Tell web filtering, which can read the full address and the content, from DNS filtering, which acts at the name lookup

Aligned to

CompTIA Security+

4.5 Given a scenario, modify enterprise capabilities to enhance security.

1.4 Explain the importance of using appropriate cryptographic solutions.

2.5 Explain the purpose of mitigation techniques used to secure the enterprise.

Key terms

Public Key Infrastructure: A framework of hardware, software, policies, and standards used to create, manage, and distribute digital certificates.
Web Filtering: A security mechanism that controls which websites users can access by blocking or allowing URLs based on defined policies.
Browser Isolation: A security technique that executes web browsing activity in an isolated environment to prevent malicious code from reaching the endpoint.
DNS Filtering: A security method that blocks access to malicious or unauthorized domains by intercepting and filtering DNS queries.
URL Scanning: The process of analyzing a web address to detect malicious or harmful content before a user accesses it.

Topics

Interactive Categorize

About TechKnowSurge

TechKnowSurge builds IT and cybersecurity professionals through hands-on, concept-first training built around real understanding — not memorization. Free interactive tools, structured programs, and 25+ years of real-world experience, all in one place.

Explore free tools and programs →