Which three options are important when positioning a next-generation firewall solution? (Choose three.)

Question

Options

• Aperformance
• Bresistance to evasion
• Ccurrent install base
• Dinteroperability
• Estability
• Fnonproprietary

• A
  72% (26)
• C
  6% (2)
• D
  14% (5)
• F
  8% (3)

Explanation

When positioning an NGFW solution, performance (A) is critical because deep-packet inspection, SSL decryption, and application-layer analysis are computationally intensive - a slow firewall becomes a bottleneck or gets bypassed. Resistance to evasion (B) is a defining NGFW characteristic, ensuring threats disguised through fragmentation, tunneling, or encoding are still detected. Stability (E) matters because a firewall that crashes or degrades under load leaves the network unprotected, defeating its purpose entirely.

The distractors are wrong for these reasons: current install base (C) reflects market adoption, not security capability; interoperability (D) is a general networking concern, not an NGFW-specific positioning criterion; and nonproprietary (F) is irrelevant - many top NGFWs use proprietary ASICs specifically to achieve the performance needed for deep inspection.

Memory tip: Think "PES" - a great NGFW must Perform under load, Evade evasion, and remain Stable. If the option is about business/market factors (install base) or generic networking traits (interoperability, open standards), it's a distractor.

No community discussion yet for this question.