Palo Alto Networks Certified Cybersecurity Entry-level Technician (PCCET)Network SecurityHard
A company is concerned about employees accessing unauthorized websites and downloading malicious content. They want a solution that can identify and block specific applications (e.g., peer-to-peer file sharing, certain streaming services) and filter web content based on categories, even if they use standard ports like 80 or 443. Which network security technology is designed to provide this level of granular control?
- AVirtual Private Network (VPN)
- BNext-Generation Firewall (NGFW)
- CStateful Firewall
- DIntrusion Prevention System (IPS)
Show answer & explanationAnswer & explanation
Correct answer: B. Next-Generation Firewall (NGFW)
A Next-Generation Firewall (NGFW) provides application awareness and control, allowing it to identify and block specific applications regardless of the port they use, and also offers URL filtering and content inspection capabilities.
Why the other options are wrong
- A. A VPN provides secure, encrypted tunnels for remote access or site-to-site connections; it is not designed for granular application control or web content filtering within an internal network.
- C. A stateful firewall primarily inspects IP addresses and port numbers and tracks connections; it cannot identify specific applications or filter content based on categories.
- D. An IPS detects and prevents known threats based on signatures or behavioral analysis, but its primary role is not granular application control or web content filtering by category.
Application Control
A feature of Next-Generation Firewalls (NGFWs) that allows administrators to identify, classify, and control specific applications running on the network, regardless of the port or protocol they use.
- Goes beyond port-based filtering.
- Enables granular policy enforcement for specific applications (e.g., block Facebook, allow Salesforce).
- Improves security posture by reducing the attack surface and preventing unauthorized application usage.
Memory trick: It's not just about the door (port), but who's coming in and what they're carrying (application/content).