200-201 Question 103
Single answerA cybersecurity analyst is tasked with configuring a next-generation firewall (NGFW) to enhance threat detection and prevention. Which feature of the NGFW should the analyst enable to inspect and block malicious activity within encrypted traffic without compromising privacy?
- A
Application Layer Filtering
- B
Deep Packet Inspection (DPI)
- C
SSL/TLS Decryption
- D
Intrusion Prevention System (IPS)
Show answer and explanation
Correct answer: C
Explanation
Next-generation firewalls (NGFWs) are equipped with advanced features to address modern cyber threats. SSL/TLS Decryption is essential for inspecting encrypted traffic, which is increasingly used by attackers to hide malicious activity. By enabling this feature, the NGFW can detect and mitigate threats within encrypted communication while maintaining secure traffic flow.
- A. Incorrect.
Application Layer Filtering is used to control traffic based on application-level data, but it does not address encrypted traffic specifically.
- B. Incorrect.
Deep Packet Inspection (DPI) enables advanced traffic analysis but cannot inspect encrypted traffic unless decryption is performed.
- C. Correct.
SSL/TLS Decryption is the correct feature as it allows the NGFW to decrypt, inspect, and re-encrypt traffic to detect threats within encrypted data.
- D. Incorrect.
Intrusion Prevention System (IPS) focuses on identifying and blocking known threats but does not inherently provide the capability to handle encrypted traffic.