350-401 · Question #581
When firewall capabilities are considered, which feature is found only in Cisco next-generation firewalls?
The correct answer is A. malware protection. Cisco Next-Generation Firewalls (NGFWs) uniquely incorporate advanced threat protection features like integrated malware protection that traditional stateful firewalls lack.
Question
When firewall capabilities are considered, which feature is found only in Cisco next-generation firewalls?
Options
- Amalware protection
- Bstateful inspection
- Ctraffic filtering
- Dactive/standby high availability
How the community answered
(56 responses)- A93% (52)
- B2% (1)
- C2% (1)
- D4% (2)
Why each option
Cisco Next-Generation Firewalls (NGFWs) uniquely incorporate advanced threat protection features like integrated malware protection that traditional stateful firewalls lack.
Cisco Next-Generation Firewalls (NGFWs) are distinguished by their inclusion of advanced threat protection capabilities such as malware protection, intrusion prevention systems (IPS), and application visibility and control (AVC), which extend beyond the basic functions of traditional stateful firewalls.
Stateful inspection is a core functionality present in all modern firewalls, including traditional ones, allowing them to track the state of connections and permit return traffic.
Traffic filtering based on IP addresses, ports, and protocols is a fundamental capability of all firewalls, both traditional and next-generation.
Active/standby high availability is a common deployment model for both traditional and next-generation firewalls to ensure continuous network protection in the event of a device failure.
Concept tested: Next-Generation Firewall features
Source: https://www.cisco.com/c/en/us/products/security/firewalls/what-is-a-next-generation-firewall-ngfw.html
Topics
Community Discussion
No community discussion yet for this question.