What are two common use cases for remote internet access (RIA)? (Choose two.)

Remote Internet Access (RIA) is a centralized internet breakout strategy within a Secure SD-WAN architecture. In this model, spoke or branch locations do not access the internet directly. Instead, all internet-bound traffic is securely tunneled over the SD-WAN overlay to a central hub. The hub then provides the internet connection for all connected spokes. The primary driver for this design is to centralize the security stack. By forcing traffic through the hub, an organization can apply a consistent and comprehensive set of security policies (such as NGFW, IPS, and web filtering) at a single point, simplifying management and ensuring uniform protection across the entire network.

A. This describes Direct Internet Access (DIA) or local breakout, which is an alternative model to RIA where spokes connect directly to the internet.

D. This is a feature of a Direct Internet Access (DIA) model, where each spoke must have its own security appliance for thorough inspection.

1. Fortinet FortiOS 7.0 SD-WAN Administration Guide: In the section "Internet breakout", the guide describes the two main strategies. It states, "Backhauling Internet traffic to a central location: All traffic destined for the Internet is sent from the branch to the data center or a hub site... This allows for centralized security inspection." This directly supports that RIA involves providing access through the hub (B) for centralized inspection (C). (Reference: FortiOS 7.0 SD-WAN Administration Guide, Page 13, "Internet breakout" section).

2. Fortinet SD-WAN Architecture for Enterprise 7.0 Guide: Under the "Secure SD-WAN use cases" chapter, the "Centralized internet breakout" section explicitly states: "In this use case, all traffic from the branches that is destined for the internet is sent to a central hub for security inspection before it is sent to the internet." This confirms that providing internet access through the hub (B) and centralizing security inspection (C) are the core components of this use case. (Reference: SD-WAN Architecture for Enterprise 7.0, Page 11, "Centralized internet breakout" section).