A university is designing a threat defense architecture. They want to detect and block known exploit attempts at the network perimeter, but also want to identify zero-day attacks that evade signature-based detection. Which combination of threat defense technologies should be included?

Network-based malware sandboxing only

Traditional IDS with signature-based detection only

Stateful firewall with application filtering

Next-generation IPS with signature-based detection and behavioral/anomaly-based analysis

CiscoCertified Network Professional Enterprise

Domain 5Objective 4

5.4 Describe the Components of Network Security Design 350-401 Practice Questions (Page 12)

Part of the 5.0 Security domain, which accounts for 20% of the 350-401 exam. Cisco does not publish an official question count, but from its 120-minute exam (~50–80 total, ~10–16 in this domain), expect 3–4 from this objective — we provide 56 practice questions to prepare you well beyond it. (estimate)

56questions here

12free pages

13concepts

20%of the exam

Questions 56–56

56application · medium
A university is designing a threat defense architecture. They want to detect and block known exploit attempts at the network perimeter, but also want to identify zero-day attacks that evade signature-based detection. Which combination of threat defense technologies should be included?
Select an answer first

Finished these 1 questions?

Review the revealed explanations, or continue through the curriculum.

No more pagesBack to 350-401

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Cisco. “350-401” is a trademark of its owner, used for identification only.

5.4 Describe the Components of Network Security Design 350-401 Practice Questions (Page 12)

Questions 56–56

A university is designing a threat defense architecture. They want to detect and block known exploit attempts at the network perimeter, but also want to identify zero-day attacks that evade signature-based detection. Which combination of threat defense technologies should be included?

Keep studying — 5.0 Security