700-765 · Question #189
In the Cloud Data Center Edge use case, which capability is provided by NGFW and NGIPS?
The correct answer is A. security and network support for VPC and VXLAN technologies. In the Cloud Data Center Edge use case, NGFW and NGIPS deliver security and network support specifically for cloud-native constructs like VPC and VXLAN.
Question
In the Cloud Data Center Edge use case, which capability is provided by NGFW and NGIPS?
Options
- Asecurity and network support for VPC and VXLAN technologies
- Bdevice profiling and onboarding
- Cvarying modes including single context mode
- Dplatform exchange grid
How the community answered
(27 responses)- A70% (19)
- B4% (1)
- C7% (2)
- D19% (5)
Why each option
In the Cloud Data Center Edge use case, NGFW and NGIPS deliver security and network support specifically for cloud-native constructs like VPC and VXLAN.
Next-Generation Firewalls and Next-Generation Intrusion Prevention Systems at the cloud data center edge are engineered to inspect and secure traffic flowing through cloud networking constructs such as Virtual Private Clouds (VPC) and VXLAN overlays, providing threat prevention and policy enforcement at the cloud boundary.
Device profiling and onboarding is a capability provided by Cisco Identity Services Engine (ISE), not by NGFW or NGIPS technologies.
Single context mode is a firewall deployment configuration option available on platforms like the Cisco ASA, not a distinguishing capability of NGFW/NGIPS in the cloud data center edge use case.
Platform Exchange Grid (pxGrid) is a Cisco ISE feature that shares contextual data between security products, and it is not a capability associated with NGFW or NGIPS.
Concept tested: NGFW and NGIPS capabilities at cloud data center edge
Source: https://www.cisco.com/c/en/us/products/security/firewalls/what-is-a-next-generation-firewall.html
Topics
Community Discussion
No community discussion yet for this question.