CompTIA Network+ (N10-008) — Question 73

Which of the following types of devices can provide content filtering and threat protection, and manage multiple IPSec site-to-site connections?

Answer options

• A. Layer 3 switch
• B. VPN headend
• C. Next-generation firewall
• D. Proxy server
• E. Intrusion prevention

Correct answer: C

Explanation

The correct answer is C, the Next-generation firewall, as it is specifically designed to provide advanced threat protection, content filtering, and manage multiple IPSec connections. Options A (Layer 3 switch) and D (Proxy server) do not offer comprehensive threat protection, while B (VPN headend) primarily focuses on establishing VPN connections, and E (Intrusion prevention) is more about detecting and preventing attacks rather than managing site-to-site connections.