Which are two attack vectors protected by NGFW? (Choose two.)

Question

Options

• ACampus and Branch
• BVoicemail
• CData Center
• DCloud apps
• EE-mail

• A
  2% (1)
• B
  6% (3)
• C
  90% (47)
• D
  2% (1)

Explanation

Data Center (C) and E-mail (E) are the two attack vectors that NGFWs are designed to protect against, because NGFWs provide deep packet inspection and application-layer security for traffic entering/leaving data centers, and many NGFWs include email threat inspection to block phishing, malware attachments, and spam at the network perimeter. Campus and Branch (A) are network deployment locations where you might install security appliances - they describe where NGFW sits, not a threat vector it guards against. Voicemail (B) is a social engineering channel operating outside the IP network stack, so it falls outside what a firewall can inspect or block. Cloud apps (D) are primarily secured by CASB (Cloud Access Security Broker) or Secure Web Gateway solutions, not NGFW - though the distinction can blur, NGFWs are not the primary control for SaaS/cloud app threats in most vendor frameworks.

Memory tip: Think "D-E fence" - the NGFW builds a fence around the Data Center and Email traffic. The other options are either locations (A), voice channels (B), or a cloud-specific problem requiring a cloud-specific tool (D).

No community discussion yet for this question.