nerdexam
Cisco

700-765 · Question #15

Which three features provided by NGFW and NGIPS support the Internet Edge' use case? (Choose three.)

The correct answer is A. Supports High Availability C. Supports dynamic routing protocols such as OSPF or BGP E. Support for High Bandwith environments. High Availability, dynamic routing protocol support, and high bandwidth capacity are the three NGFW/NGIPS features that directly address Internet Edge deployment requirements.

Cisco Security Product Solutions

Question

Which three features provided by NGFW and NGIPS support the Internet Edge' use case? (Choose three.)

Options

  • ASupports High Availability
  • BSupport (or profiling devices
  • CSupports dynamic routing protocols such as OSPF or BGP
  • DSupport for Platform exchange grid
  • ESupport for High Bandwith environments
  • FSupport for integrated posture assessment

How the community answered

(28 responses)
  • A
    75% (21)
  • B
    4% (1)
  • D
    7% (2)
  • F
    14% (4)

Why each option

High Availability, dynamic routing protocol support, and high bandwidth capacity are the three NGFW/NGIPS features that directly address Internet Edge deployment requirements.

ASupports High AvailabilityCorrect

High Availability is essential at the Internet Edge because this is a single point of failure for all inbound and outbound internet traffic, and downtime at this boundary affects the entire organization.

BSupport (or profiling devices

Device profiling is associated with network access control solutions such as Cisco ISE, not a primary capability of NGFW or NGIPS at the Internet Edge.

CSupports dynamic routing protocols such as OSPF or BGPCorrect

The Internet Edge must exchange routes with ISPs and upstream providers, which requires support for dynamic routing protocols like OSPF and BGP to maintain proper reachability and failover.

DSupport for Platform exchange grid

Platform Exchange Grid (pxGrid) is a Cisco security ecosystem integration framework for sharing context between security products, and is not an Internet Edge-specific NGFW or NGIPS feature.

ESupport for High Bandwith environmentsCorrect

Internet Edge firewalls handle the full volume of internet-bound traffic for an organization, so support for high bandwidth environments is a fundamental requirement to prevent the security device from becoming a bottleneck.

FSupport for integrated posture assessment

Integrated posture assessment is a function of endpoint compliance solutions like Cisco ISE with AnyConnect, not a core Internet Edge NGFW or NGIPS capability.

Concept tested: NGFW and NGIPS Internet Edge use case features

Source: https://www.cisco.com/c/en/us/products/security/firepower-ngfw/index.html

Topics

#NGFW#NGIPS#Internet Edge#high availability

Community Discussion

No community discussion yet for this question.

Full 700-765 Practice