350-401 Question 295
Select 4A network administrator has deployed a Next-Generation Firewall (NGFW) to secure their enterprise network. The administrator needs to configure the firewall to inspect traffic for both web-based threats and encrypted malicious payloads. Additionally, they want to enforce application-specific policies and identify users accessing the network. Which features of NGFW should be enabled to meet these requirements?
- A
Deep Packet Inspection (DPI)
- B
SSL/TLS Decryption
- C
Application Visibility and Control (AVC)
- D
Network Address Translation (NAT)
- E
User Identity Awareness
Show answer and explanation
Correct answers: A, B, C, E
Explanation
To meet the requirements, the administrator must enable features that allow the NGFW to inspect traffic for threats, including encrypted traffic (SSL/TLS Decryption), analyze application usage (Application Visibility and Control), and identify users (User Identity Awareness). Deep Packet Inspection (DPI) is also required for thorough content analysis. NAT, while useful for address translation, does not contribute to these specific objectives.
- A. Correct.
Deep Packet Inspection (DPI) allows the NGFW to analyze the content of packets beyond just headers, enabling detection of web-based threats and inspecting payloads for malicious content.
- B. Correct.
SSL/TLS Decryption enables the NGFW to inspect encrypted traffic, ensuring that threats hidden within encrypted payloads are detected and mitigated.
- C. Correct.
Application Visibility and Control (AVC) allows the NGFW to enforce policies based on specific applications, enabling the administrator to restrict or allow application usage as needed.
- D. Incorrect.
Network Address Translation (NAT) is used to map private IP addresses to public IP addresses and is not directly related to the inspection of threats, application control, or user identification.
- E. Correct.
User Identity Awareness enables the NGFW to identify users accessing the network, allowing for user-specific policies to be enforced.