Next Generation Firewalls ICSSCADA Practice Questions (Page 5)

Questions 21–25

1. 21foundation · easy

   What is a primary use of NGFW logs in an ICS/SCADA environment?

   • ATo detect anomalies and support incident response
   • BTo replace the need for a SIEM system
   • CTo configure the firewall rules
   • DTo automatically patch vulnerabilities
   Reveal Solution Discussion Select an answer first
2. 22foundation · easy

   What is the primary purpose of stateful inspection in a firewall?

   • ATo block all traffic that does not match a static rule
   • BTo track the state of active connections and make decisions based on the context of the traffic
   • CTo identify applications by their signature
   • DTo decrypt and inspect SSL/TLS traffic
   Reveal Solution Discussion Select an answer first
4. 23foundation · easy

   How does an NGFW typically obtain user identity information to enforce user-based policies?

   • ABy integrating with directory services such as Active Directory or LDAP
   • BBy reading the user's email address from the network traffic
   • CBy requiring every user to register their MAC address
   • DBy using the source IP address only
   Reveal Solution Discussion Select an answer first
5. 24foundation · easy

   What is the benefit of enforcing security policies based on user group membership rather than individual IP addresses?

   • AIt simplifies network address translation (NAT)
   • BIt allows policies to be based on the physical location of the user
   • CIt eliminates the need for authentication
   • DPolicies remain consistent when users change devices or IP addresses
   Reveal Solution Discussion Select an answer first
6. 25foundation · easy

   What is the main advantage of application identification in an NGFW over a traditional port-based firewall?

   • AIt automatically blocks all unknown applications
   • BIt allows policies to be based on the actual application, even if it uses non-standard ports
   • CIt speeds up network traffic by reducing inspection
   • DIt eliminates the need for any firewall rules
   Reveal Solution Discussion Select an answer first