What is a characteristic of a next-generation firewall?

Question

Options

• Aonly required at the network perimeter
• Brequired in each layer of the network
• Cfilters traffic using Layer 3 and Layer 4 information only
• Dprovides intrusion prevention

• A
  5% (2)
• C
  3% (1)
• D
  92% (36)

Explanation

Next-Generation Firewalls (NGFWs) and Intrusion Prevention

NGFWs go far beyond traditional firewalls by incorporating deep packet inspection, application awareness, and intrusion prevention systems (IPS), making option D correct - they can actively detect and block threats in real time, not just filter based on ports and addresses. Option A is wrong because NGFWs are flexible enough to be deployed anywhere in the network (internal segments, cloud, endpoints), not just the perimeter. Option B is incorrect because while NGFWs can be placed in multiple layers, they are not required in each one - that would be impractical and overly rigid. Option C describes a traditional (stateful) firewall, which only inspects Layer 3 (IP) and Layer 4 (TCP/UDP) data; NGFWs operate all the way up to Layer 7, inspecting application-level traffic.

Memory Tip: Think of NGFW as a firewall that "grew up" - it does everything an old firewall does, plus it can identify apps, users, and prevent intrusions. If a feature sounds more advanced than basic port/IP filtering, it likely belongs to a NGFW. The key word "next-generation" signals added intelligence, with IPS being its most distinguishing feature.

No community discussion yet for this question.