nerdexam
Cisco

500-651 · Question #10

Which two products are part of Cisco's Data Center threat-centric solution? (Choose two.)

The correct answer is A. Rapid threat detection through NGFW and NGFWv E. Automated policy enforcement with ASAv. Cisco's Data Center threat-centric solution is built around two pillars: detecting threats quickly and enforcing policies automatically. Option A is correct because Next-Generation Firewalls (NGFW and the virtualized NGFWv) provide rapid, deep-packet threat detection inside the…

Network Security

Question

Which two products are part of Cisco's Data Center threat-centric solution? (Choose two.)

Options

  • ARapid threat detection through NGFW and NGFWv
  • BEnforced device security with Meraki
  • CURL filtering
  • DRelationship segmentation
  • EAutomated policy enforcement with ASAv

How the community answered

(29 responses)
  • A
    90% (26)
  • C
    3% (1)
  • D
    7% (2)

Explanation

Cisco's Data Center threat-centric solution is built around two pillars: detecting threats quickly and enforcing policies automatically. Option A is correct because Next-Generation Firewalls (NGFW and the virtualized NGFWv) provide rapid, deep-packet threat detection inside the data center fabric. Option E is correct because the ASAv (virtual Adaptive Security Appliance) enables automated, scalable policy enforcement - a core requirement for dynamic, software-defined data centers.

Why the distractors are wrong:

  • B (Meraki): Meraki is Cisco's cloud-managed SD-WAN/switching platform, aimed at branch/campus networks - not a data center threat-centric product.
  • C (URL filtering): This is a feature found in many Cisco products, not a standalone data center threat-centric solution component.
  • D (Relationship segmentation): This is not a recognized Cisco term; the real concept is micro-segmentation (associated with Tetration/Secure Workload), and "relationship segmentation" is a fabricated distractor.

Memory tip: Think "Detect + Enforce" - NGFW/NGFWv detects threats at wire speed, ASAv enforces policy automatically. Both are virtual-capable, which is the hallmark of modern data center security solutions. If an answer uses a made-up Cisco buzzword (like "relationship segmentation") or a product from a different portfolio (Meraki = branch, not DC), eliminate it.

Topics

#NGFW#ASAv#Data Center Security#Threat Detection

Community Discussion

No community discussion yet for this question.

Full 500-651 Practice