700-765 · Question #15
Which three features provided by NGFW and NGIPS support the Internet Edge' use case? (Choose three.)
The correct answer is A. Supports High Availability C. Supports dynamic routing protocols such as OSPF or BGP E. Support for High Bandwith environments. High Availability, dynamic routing protocol support, and high bandwidth capacity are the three NGFW/NGIPS features that directly address Internet Edge deployment requirements.
Question
Which three features provided by NGFW and NGIPS support the Internet Edge' use case? (Choose three.)
Options
- ASupports High Availability
- BSupport (or profiling devices
- CSupports dynamic routing protocols such as OSPF or BGP
- DSupport for Platform exchange grid
- ESupport for High Bandwith environments
- FSupport for integrated posture assessment
How the community answered
(28 responses)- A75% (21)
- B4% (1)
- D7% (2)
- F14% (4)
Why each option
High Availability, dynamic routing protocol support, and high bandwidth capacity are the three NGFW/NGIPS features that directly address Internet Edge deployment requirements.
High Availability is essential at the Internet Edge because this is a single point of failure for all inbound and outbound internet traffic, and downtime at this boundary affects the entire organization.
Device profiling is associated with network access control solutions such as Cisco ISE, not a primary capability of NGFW or NGIPS at the Internet Edge.
The Internet Edge must exchange routes with ISPs and upstream providers, which requires support for dynamic routing protocols like OSPF and BGP to maintain proper reachability and failover.
Platform Exchange Grid (pxGrid) is a Cisco security ecosystem integration framework for sharing context between security products, and is not an Internet Edge-specific NGFW or NGIPS feature.
Internet Edge firewalls handle the full volume of internet-bound traffic for an organization, so support for high bandwidth environments is a fundamental requirement to prevent the security device from becoming a bottleneck.
Integrated posture assessment is a function of endpoint compliance solutions like Cisco ISE with AnyConnect, not a core Internet Edge NGFW or NGIPS capability.
Concept tested: NGFW and NGIPS Internet Edge use case features
Source: https://www.cisco.com/c/en/us/products/security/firepower-ngfw/index.html
Topics
Community Discussion
No community discussion yet for this question.