Cisco
350-701 · Question #673
350-701 Question #673: Real Exam Question with Answer & Explanation
The correct answer is A. nextgeneration firewall. A next-generation firewall (NGFW) is the security product designed to match and control traffic based on the specific application type, rather than just traditional source/destination addresses and ports.
Submitted by obi.ng· Mar 30, 2026Network Security
Question
A network administrator needs a solution to match traffic and allow or deny the traffic based on the type of application, not just the source or destination address and port used. Which kind of security product must the network administrator implement to meet this requirement?
Options
- Anextgeneration firewall
- Bweb application firewall
- Cnext generation intrusion prevention system
- Dintrusion detection system
Explanation
A next-generation firewall (NGFW) is the security product designed to match and control traffic based on the specific application type, rather than just traditional source/destination addresses and ports.
Common mistakes.
- B. A web application firewall (WAF) specifically protects web applications from common web-based attacks (e.g., SQL injection, XSS) but focuses on HTTP/HTTPS traffic at the application layer, not general application identification across all protocols.
- C. A next-generation intrusion prevention system (NGIPS) is designed for threat detection and prevention based on signatures and behavioral analysis, but while it can be application-aware, it's typically a component or feature within an NGFW, or focused on IPS functions rather than primary traffic filtering by application type.
- D. An intrusion detection system (IDS) primarily monitors network or system activities for malicious policies and alerts on them, but does not actively block or allow traffic based on application type in a filtering capacity.
Concept tested. Next-generation firewall capabilities (application awareness)
Reference. https://www.cisco.com/c/en/us/products/security/next-generation-firewalls/what-is-a-ngfw.html
Topics
#Next-generation firewall#Application control#Traffic filtering
Community Discussion
No community discussion yet for this question.