Next Generation Firewalls ICSSCADA Practice Questions (Page 3)

Questions 11–15

1. 11foundation · easy

   Which factor is most important to consider when assessing NGFW performance in an ICS/SCADA network?

   • AThe throughput and latency introduced by deep inspection features
   • BThe color of the device chassis
   • CThe physical size of the data center
   • DThe number of users in the organization
   Reveal Solution Discussion Select an answer first
2. 12foundation · easy

   What is a characteristic of passive mode deployment for an NGFW?

   • AIt blocks malicious traffic in real time
   • BIt is used only for VPN termination
   • CIt monitors traffic without being in the direct data path
   • DIt requires a dedicated physical appliance
   Reveal Solution Discussion Select an answer first
4. 13application · medium

   A nuclear research facility maintains an air-gapped network for its control systems. Occasionally, engineers need to transfer small data files from the corporate network to the control network. The facility wants to use an NGFW to facilitate this controlled exchange without opening a full network connection. What should they configure?

   • APlace the NGFW in passive mode to monitor file transfers without enforcement.
   • BAllow all traffic between the networks for a limited time window.
   • CDeploy an NGFW with a data diode-like policy that allows only specific file transfer protocols and content types.
   • DCreate a VPN tunnel between the corporate and control networks through the NGFW.
   Reveal Solution Discussion Select an answer first
5. 14foundation · easy

   Which NGFW feature allows administrators to generate periodic summaries of security events?

   • ANAT translation
   • BPacket capture
   • CReporting and dashboard capabilities
   • DVPN tunneling
   Reveal Solution Discussion Select an answer first
6. 15foundation · easy

   What is the primary purpose of SSL/TLS decryption and inspection in an NGFW?

   • ATo ensure that all traffic is encrypted
   • BTo speed up encrypted traffic by caching it
   • CTo inspect encrypted traffic for threats that would otherwise be hidden
   • DTo break the encryption so that other devices can read it
   Reveal Solution Discussion Select an answer first