350-401 Question 298
Single answerAn organization has implemented a next-generation firewall (NGFW) to enhance its network security. The security team needs to ensure that the NGFW can identify and block applications such as peer-to-peer file sharing, regardless of the port or protocol used. Which feature of the NGFW should the team use to achieve this?
- A
Application visibility and control (AVC)
- B
Stateful packet inspection
- C
Intrusion prevention system (IPS)
- D
URL filtering
Show answer and explanation
Correct answer: A
Explanation
Next-generation firewalls incorporate advanced features like Application Visibility and Control (AVC) to identify and manage applications at the application layer, regardless of the port or protocol being used. This capability is essential for blocking specific applications like peer-to-peer file sharing, making AVC the correct choice in this scenario.
- A. Correct.
Application visibility and control (AVC) is a key feature of NGFWs that allows the firewall to identify and manage applications based on their behavior, regardless of the port or protocol. This is the correct feature for blocking specific applications like peer-to-peer file sharing.
- B. Incorrect.
Stateful packet inspection tracks the state of network connections and ensures packets are part of a valid session. While useful, it does not provide detailed application-level control.
- C. Incorrect.
Intrusion prevention system (IPS) is used to detect and block malicious activities and threats. However, it is not specifically designed for application identification and control.
- D. Incorrect.
URL filtering restricts access to specific websites based on their URLs. This feature is unrelated to identifying or blocking applications at the application layer.