nerdexam
Cisco

350-401 · Question #581

When firewall capabilities are considered, which feature is found only in Cisco next-generation firewalls?

The correct answer is A. malware protection. Cisco Next-Generation Firewalls (NGFWs) uniquely incorporate advanced threat protection features like integrated malware protection that traditional stateful firewalls lack.

Submitted by kwame.gh· Mar 6, 2026Security

Question

When firewall capabilities are considered, which feature is found only in Cisco next-generation firewalls?

Options

  • Amalware protection
  • Bstateful inspection
  • Ctraffic filtering
  • Dactive/standby high availability

How the community answered

(56 responses)
  • A
    93% (52)
  • B
    2% (1)
  • C
    2% (1)
  • D
    4% (2)

Why each option

Cisco Next-Generation Firewalls (NGFWs) uniquely incorporate advanced threat protection features like integrated malware protection that traditional stateful firewalls lack.

Amalware protectionCorrect

Cisco Next-Generation Firewalls (NGFWs) are distinguished by their inclusion of advanced threat protection capabilities such as malware protection, intrusion prevention systems (IPS), and application visibility and control (AVC), which extend beyond the basic functions of traditional stateful firewalls.

Bstateful inspection

Stateful inspection is a core functionality present in all modern firewalls, including traditional ones, allowing them to track the state of connections and permit return traffic.

Ctraffic filtering

Traffic filtering based on IP addresses, ports, and protocols is a fundamental capability of all firewalls, both traditional and next-generation.

Dactive/standby high availability

Active/standby high availability is a common deployment model for both traditional and next-generation firewalls to ensure continuous network protection in the event of a device failure.

Concept tested: Next-Generation Firewall features

Source: https://www.cisco.com/c/en/us/products/security/firewalls/what-is-a-next-generation-firewall-ngfw.html

Topics

#Next-Generation Firewalls#Firewall features#Malware protection

Community Discussion

No community discussion yet for this question.

Full 350-401 Practice