Implementing and Operating Cisco Enterprise Network Core Technologies (ENCOR) — Question 302

What is a characteristic of a next-generation firewall?

Answer options

• A. only required at the network perimeter
• B. required in each layer of the network
• C. filters traffic using Layer 3 and Layer 4 information only
• D. provides intrusion prevention

Correct answer: D

Explanation

The correct answer is D because next-generation firewalls are designed to provide intrusion prevention in addition to traditional firewall functions. Options A and B are incorrect as next-generation firewalls can be deployed in various parts of the network, not just at the perimeter or in every layer. Option C is also wrong because these firewalls analyze traffic beyond just Layer 3 and Layer 4, incorporating application-level data.