700-765 Question #128: Real Exam Question with Answer & Explanation

The correct answer is D: see and share malware details. Cisco NGFW Identity-Based Policy Control enables visibility into malware details and actively prevents threats from entering or spreading within the network.

Question

What are two capabilities of Cisco's NGFW Identity Based Policy Control feature? (Choose two.)

Options

Asecurity enforced at the DNS layer
Baccess to multiple data layers
Caccess to Trojan downloader
Dsee and share malware details
Ethreats stopped from getting in and spreading

Explanation

Cisco NGFW Identity-Based Policy Control enables visibility into malware details and actively prevents threats from entering or spreading within the network.

Common mistakes.

A. Security enforced at the DNS layer is a capability of Cisco Umbrella, not a function of NGFW Identity-Based Policy Control.
B. Access to multiple data layers is not a defined or documented capability of NGFW Identity-Based Policy Control.
C. Providing access to a Trojan downloader is not a security capability and directly contradicts the protective purpose of NGFW.

Concept tested. Cisco NGFW Identity-Based Policy Control capabilities

Reference. https://www.cisco.com/c/en/us/products/security/firepower-ngfw/index.html

Community Discussion

No community discussion yet for this question.

Full 700-765 Practice