2.2 Identify the Types of Data Provided by These Technologies 200-201 Practice Questions (Page 2)

Questions 6–10

1. 6expert · hard

   A security team is evaluating monitoring tools. They need to enforce a policy that blocks access to social media sites during work hours, but they also need to log the URL category and reputation score for each blocked request. Additionally, they want to identify which users are attempting to access these sites. Which technology provides the most complete data for this requirement?

   • AWeb content filtering integrated with an identity provider
   • BApplication visibility and control
   • CNetFlow with user identity
   • DEmail content filtering
   Reveal Solution Discussion Select an answer first
2. 7foundation · easy

   A network engineer is analyzing NetFlow data to understand traffic patterns. Which fields are typically included in a NetFlow flow record?

   • ASource and destination IP addresses, source and destination ports, protocol, and byte and packet counts
   • BURL categories and reputation scores for web requests
   • CFull packet payloads and application-layer data
   • DUser identity and application-level information for each session
   Reveal Solution Discussion Select an answer first
4. 8application · medium

   An organization wants to enforce a policy that blocks access to known phishing sites and logs the URL category and reputation score for each blocked request. Which technology provides this specific data?

   • AWeb content filtering
   • BApplication visibility and control
   • CNetFlow
   • DEmail content filtering
   Reveal Solution Discussion Select an answer first
5. 9expert · hard

   A security analyst is comparing a traditional stateful firewall and a next-generation firewall for a new deployment. The analyst needs to see connection state for all traffic, but also needs to identify the application and user for each connection. The analyst is concerned about performance and wants to minimize the number of devices. Which solution best meets these requirements?

   • ADeploy both a traditional stateful firewall and an NGFW in series
   • BDeploy a traditional stateful firewall and use TCP dump for application and user identity
   • CDeploy a traditional stateful firewall and use NetFlow for application and user identity
   • DDeploy a next-generation firewall and use its logs for connection state, application, and user identity
   Reveal Solution Discussion Select an answer first
6. 10foundation · easy

   Which data types are typically provided by web content filtering?

   • ASpam and malware detection results for emails
   • BURL categories, reputation scores, and block/allow decisions
   • CSource and destination IP addresses and ports for each connection
   • DApplication identification and usage statistics
   Reveal Solution Discussion Select an answer first