200-301 Question 13
Select 3A network administrator is configuring a next-generation firewall (NGFW) for an organization to improve security and prevent unauthorized access. The firewall must inspect traffic at a deeper level, provide application-layer visibility, and detect threats in real-time. Which features should the administrator enable to meet these requirements?
- A
Deep Packet Inspection (DPI)
- B
Application Awareness and Control
- C
Port Address Translation (PAT)
- D
Intrusion Prevention System (IPS)
- E
Static Packet Filtering
Show answer and explanation
Correct answers: A, B, D
Explanation
To meet the requirements of inspecting traffic at a deeper level, providing application-layer visibility, and detecting threats in real-time, the administrator must enable features like Deep Packet Inspection (DPI), Application Awareness and Control, and Intrusion Prevention System (IPS). These features collectively allow the NGFW to analyze traffic comprehensively, enforce policies based on application behavior, and block potential threats proactively. Other features like PAT and Static Packet Filtering are unrelated or insufficient for such advanced security needs.
- A. Correct.
Deep Packet Inspection (DPI) enables the NGFW to analyze the contents of packets beyond just headers, allowing it to detect and block malicious payloads or unauthorized data transfers.
- B. Correct.
Application Awareness and Control allows the NGFW to identify, monitor, and control traffic based on specific applications, enhancing security and enforcing application-based policies.
- C. Incorrect.
Port Address Translation (PAT) is a NAT feature used to conserve public IP addresses and is not related to deep traffic inspection or threat detection.
- D. Correct.
Intrusion Prevention System (IPS) is an essential feature that detects and blocks known and unknown threats in real-time, complementing the NGFW's security capabilities.
- E. Incorrect.
Static Packet Filtering is a basic firewall function that examines packet headers for filtering but lacks the deep inspection capabilities required for advanced threat detection.