What are two benefits of using Cisco Secure Access Secure Web Gateway in addition to...

DNS-layer protection evaluates domains before a connection is established, but a Secure Web Gateway provides deeper control after web traffic is proxied. URL filtering can allow or block requests according to the complete URL, category, reputation, or organizational policy, so A is correct. Secure Web Gateway inspection can also apply data loss prevention controls to web uploads and transfers, making C correct. Cisco describes URL filtering as a core Secure Web Gateway capability, while its Secure Access DLP documentation states that DLP protects sensitive data uploaded to the web or transferred externally. Blocking malware before DNS lookup belongs to DNS-layer enforcement, not an additional SWG benefit. Internal mail routing is an email-security function, and firewall DNS caching is not the requested Secure Access security capability.

================