nerdexam
CompTIA

CAS-005 · Question #429

Based on a recent security audit, a company discovered the perimeter strategy is inadequate for its recent growth. To address this issue, the company is looking for a solution that includes the…

The correct answer is C. NGFW. A Next-Generation Firewall (NGFW) consolidates traditional firewall functions (stateful packet inspection, VPN termination) with advanced capabilities such as intrusion prevention, application- layer (L7) inspection, and support for multiple VPN contexts. This single-footprint…

Submitted by rania.sa· Mar 6, 2026Security Architecture

Question

Based on a recent security audit, a company discovered the perimeter strategy is inadequate for its recent growth. To address this issue, the company is looking for a solution that includes the following requirements:

  • Collapse of multiple network security technologies into a single

footprint

  • Support for multiple VPNs with different security contexts
  • Support for application layer security (Layer 7 of the OSI Model)

Which of the following technologies would be the most appropriate solution given these requirements?

Options

  • ANAT gateway
  • BReverse proxy
  • CNGFW
  • DNIDS

How the community answered

(56 responses)
  • A
    5% (3)
  • B
    4% (2)
  • C
    80% (45)
  • D
    11% (6)

Explanation

A Next-Generation Firewall (NGFW) consolidates traditional firewall functions (stateful packet inspection, VPN termination) with advanced capabilities such as intrusion prevention, application- layer (L7) inspection, and support for multiple VPN contexts. This single-footprint device can host separate VPN tunnels with distinct security policies while enforcing deep-packet and application- level controls across all traffic.

Community Discussion

No community discussion yet for this question.

Full CAS-005 Practice