Which option describes how the Umbrella protects your internal endpoints from potentially malicious sites that have not been inspected by Umbrella?

Q61.Your organization signed up for Umbrella Enterprise. Before you deploy Umbrella client, you configured the Umbrella DNS server as forwarders on your enterprise DNS servers to offer basic security services for Internet-Bound traffic.

Which option describes how the Umbrella protects your internal endpoints from potentially malicious sites that have not been inspected by Umbrella?
A . Traffic is allowed through and then passively inspected by the Umbrella Cloud
B . When the request is made, Umbrella Cloud launches a simultaneous request to the destination service and attempts to inspect it. After it is inspected, the client is allowed or denied access based on the results.
C . Traffic is redirected through Umbrella Cloud service before it is denied or allowed through to the destination
D . Traffic is duplicated to Umbrella Cloud and inspected. If it is malicious, the client is blocked automatically.
E . Traffic is denied with an access blocked message.

Answer: C