When deploying the Cisco ASA with the FirePOWER services module, which two functions are performed by the FirePOWER services module? (Choose two)

Question

Options

• Afile type filtering
• Bapplication inspection
• Cbotnet filtering
• DTCP normalization
• Eapplication visibility and control

• A
  89% (41)
• B
  2% (1)
• C
  2% (1)
• D
  7% (3)

Explanation

A (file type filtering) and E (application visibility and control) are correct because the FirePOWER services module is Cisco's Next-Generation IPS (NGIPS) add-on, purpose-built to extend the ASA with advanced threat detection - specifically the ability to inspect and filter files by type (including malware detection via AMP) and to identify, monitor, and control applications at Layer 7 with deep granularity.

Why the distractors are wrong:

• B (application inspection) is performed by the base ASA itself (classic stateful inspection of FTP, HTTP, SIP, etc.), not the FirePOWER module.
• C (botnet filtering) is also an ASA-native feature - the ASA's Botnet Traffic Filter uses dynamic IP blacklists independently of FirePOWER.
• D (TCP normalization) is handled by the ASA's stateful TCP engine, again not the FirePOWER module.

Memory tip: Think of the FirePOWER module as the ASA's "next-gen eyes" - it sees what type of files cross the network and which applications are running (file + app). Everything else on the list (botnet filtering, TCP normalization, application inspection) belongs to the traditional ASA firewall engine that existed before FirePOWER was introduced.

No community discussion yet for this question.