CompTIA Network+ (N10-007) — Question 376

A Chief Information Officer (CIO) tasks the network engineer with protecting the network from outside attacks. Placing which of the following devices on the network perimeter would provide the MOST security for the system?

Answer options

• A. Firewall
• B. NGFW
• C. Content filter
• D. IDS/IPS

Correct answer: B

Explanation

The NGFW (Next-Generation Firewall) is designed to provide advanced security features, including deep packet inspection and intrusion prevention, making it the most effective at protecting the network perimeter. In contrast, a traditional Firewall mainly controls access but lacks the advanced capabilities of an NGFW. A Content filter focuses on web content and does not provide comprehensive network protection, while IDS/IPS systems monitor and respond to threats but do not actively block them at the perimeter.