350-401 Question #1215: Real Exam Question with Answer & Explanation

Question

Which two advanced security features are available in next-generation firewalls but were not provided by standard firewalls? (Choose two.)

Options

• Astateful traffic inspection
• Bremote access VPN
• Cnetwork telemetry
• Dintrusion prevention
• Eapplication control

Explanation

Next-generation firewalls (NGFWs) distinguish themselves from standard firewalls by integrating advanced security capabilities like intrusion prevention and application-level control.

Common mistakes.

• A. Stateful traffic inspection is a fundamental feature that has been present in traditional firewalls for many years, tracking connection states to permit return traffic and block unsolicited packets.
• B. Remote access VPN capabilities have been a standard feature of firewalls and dedicated VPN appliances long before the advent of next-generation firewalls.
• C. While NGFWs contribute to network telemetry, 'network telemetry' itself is a broader concept for collecting network data and not an exclusive, inherent security feature provided only by NGFWs as an advanced capability.

Concept tested. Next-generation firewall features

Reference. https://www.cisco.com/c/en/us/products/security/firewalls/what-is-a-next-generation-firewall-ngfw.html

No community discussion yet for this question.