An NGFW policy allows general web browsing but blocks access to known malicious or high-risk websites. Which NGFW security function is MOST directly responsible for this behavior?

The correct answer is B. URL filtering. URL filtering maintains categorized databases of URLs and domains organized by risk level (malicious, phishing, gambling, adult content, etc.) and reputation scores. When a user attempts to browse to a URL, the NGFW checks it against this database in real time and either allows…

Threat Prevention and Web Filtering

Question

Options

AIntrusion Prevention System (IPS)
BURL filtering
CAntivirus scanning
DNetwork Address Translation (NAT)

How the community answered

(30 responses)

A
3% (1)
B
87% (26)
C
7% (2)
D
3% (1)

Explanation

URL filtering maintains categorized databases of URLs and domains organized by risk level (malicious, phishing, gambling, adult content, etc.) and reputation scores. When a user attempts to browse to a URL, the NGFW checks it against this database in real time and either allows or blocks the request based on policy. This is exactly what enables 'allow general web browsing but block malicious/high-risk sites' - the distinction is made by the URL's category and reputation, not by the application protocol. IPS (A) detects exploit attempts and attack patterns within traffic payloads, not the destination URL category. Antivirus scanning (C) analyzes file downloads for malware content. NAT (D) translates IP addresses and has no awareness of URL reputation or category.

Topics

#URL Filtering#Web Security#Threat Prevention#Security Policy

Community Discussion

No community discussion yet for this question.

Full NGFW-ENGINEER Practice