700-765 · Question #128
What are two capabilities of Cisco's NGFW Identity Based Policy Control feature? (Choose two.)
The correct answer is D. see and share malware details E. threats stopped from getting in and spreading. Cisco NGFW Identity-Based Policy Control enables visibility into malware details and actively prevents threats from entering or spreading within the network.
Question
What are two capabilities of Cisco's NGFW Identity Based Policy Control feature? (Choose two.)
Options
- Asecurity enforced at the DNS layer
- Baccess to multiple data layers
- Caccess to Trojan downloader
- Dsee and share malware details
- Ethreats stopped from getting in and spreading
How the community answered
(15 responses)- A13% (2)
- B7% (1)
- D80% (12)
Why each option
Cisco NGFW Identity-Based Policy Control enables visibility into malware details and actively prevents threats from entering or spreading within the network.
Security enforced at the DNS layer is a capability of Cisco Umbrella, not a function of NGFW Identity-Based Policy Control.
Access to multiple data layers is not a defined or documented capability of NGFW Identity-Based Policy Control.
Providing access to a Trojan downloader is not a security capability and directly contradicts the protective purpose of NGFW.
Identity-Based Policy Control integrates with Cisco AMP to provide visibility into and the ability to see and share malware file trajectory details across the security ecosystem.
NGFW with identity-based policies inspects traffic in context and enforces user/group rules to stop threats at ingress and prevent lateral movement once inside the network.
Concept tested: Cisco NGFW Identity-Based Policy Control capabilities
Source: https://www.cisco.com/c/en/us/products/security/firepower-ngfw/index.html
Topics
Community Discussion
No community discussion yet for this question.