500-651 · Question #88
Which three values are provided by NGFW and NGIPS in the "Campus NGFW"? (Choose three.)
The correct answer is A. Dynamic routing port to meet all network needs. B. Differentiated Mobile Access D. High throughput maintained while still protecting domain against threats. In the Campus NGFW architecture, NGFW and NGIPS deliver dynamic routing support (A) to integrate seamlessly into complex campus topologies using protocols like OSPF or EIGRP, differentiated mobile access (B) to apply granular policies for the diverse mix of personal and…
Question
Which three values are provided by NGFW and NGIPS in the "Campus NGFW"? (Choose three.)
Options
- ADynamic routing port to meet all network needs.
- BDifferentiated Mobile Access
- CAdditional firewalls across all platforms
- DHigh throughput maintained while still protecting domain against threats
- EIdentity Services Engine
- FFlexible AAA Options
How the community answered
(45 responses)- A93% (42)
- E2% (1)
- F4% (2)
Explanation
In the Campus NGFW architecture, NGFW and NGIPS deliver dynamic routing support (A) to integrate seamlessly into complex campus topologies using protocols like OSPF or EIGRP, differentiated mobile access (B) to apply granular policies for the diverse mix of personal and corporate mobile devices found in campus environments, and high throughput with threat protection (D) - the core value proposition of NGFW/NGIPS, ensuring performance is not sacrificed for security.
Why the distractors are wrong:
- C (Additional firewalls across all platforms) is vague and describes a deployment count, not a value delivered by the technology itself.
- E (Identity Services Engine) - ISE is a separate Cisco product that integrates with NGFW; it is not a value provided by NGFW/NGIPS.
- F (Flexible AAA Options) is primarily a function of ISE or dedicated AAA infrastructure, not a defining value of NGFW/NGIPS in the campus context.
Memory tip: Think "D-M-T" - Dynamic routing, Mobile access, Throughput with protection - the three things a campus demands that NGFW/NGIPS specifically deliver. If an answer points to a separate product (ISE) or a generic deployment concept (more firewalls, AAA), it's a distractor.
Topics
Community Discussion
No community discussion yet for this question.