1.6 Cisco NGFW Features CCIE-SECURITY Practice Questions (Page 2)

Questions 6–10

1. 6foundation · easy

   How does a Cisco NGFW use the geolocation database?

   • ATo determine the application being used
   • BTo identify the user's name
   • CTo resolve domain names
   • DTo determine the country of origin for an IP address
   Reveal Solution Discussion Select an answer first
2. 7foundation · easy

   In a geolocation-based policy, what attribute is used to match traffic?

   • AApplication category
   • BPort number
   • CSource or destination country
   • DUser group membership
   Reveal Solution Discussion Select an answer first
4. 8foundation · easy

   What is a common use case for geolocation-based policies?

   • AIdentifying users based on their location
   • BPrioritizing traffic from local users
   • CBlocking traffic from countries where the organization does not do business
   • DDecrypting traffic from specific countries
   Reveal Solution Discussion Select an answer first
5. 9foundation · easy

   What is the purpose of Application Visibility and Control (AVC) on a Cisco NGFW?

   • ATo encrypt application traffic
   • BTo block all social media applications
   • CTo provide user authentication
   • DTo identify and control applications regardless of port
   Reveal Solution Discussion Select an answer first
6. 10foundation · easy

   Which of the following is a benefit of using AVC over traditional port-based firewalling?

   • AIt provides faster throughput
   • BIt can identify applications that use non-standard ports
   • CIt automatically blocks all unknown traffic
   • DIt eliminates the need for SSL inspection
   Reveal Solution Discussion Select an answer first