Pass the Cisco CCNP Enterprise 350-401 Questions and answers with CertsForce

The correct answer is A. integrated IPS.

A traditional firewall provides:

Stateful inspection

Basic ACL filtering

NAT

Sometimes VPN services

A Next-Generation Firewall (NGFW) adds advanced capabilities such as:

Integrated Intrusion Prevention System (IPS)

Application awareness and control

Advanced malware protection

Integrated IPS (Intrusion Prevention System) is a defining feature of NGFWs.

It allows the firewall to:

Detect and block known and unknown threats

Perform deep packet inspection

Stop attacks in real time

This capability is not part of traditional firewalls, which only inspect traffic based on state and basic rules.

B. Stateful firewall policies This is a core feature of traditional firewalls, not unique to NGFWs.

C. SSL VPN VPN functionality exists in both traditional and next-generation firewalls.

D. NAT NAT is a basic firewall/network feature, not exclusive to NGFWs.

Remember the distinction:

Traditional Firewall → Stateful filtering, NAT, VPN

Next-Generation Firewall → Adds IPS + Application Awareness + Advanced Security

NGFW = Traditional Firewall + Advanced Threat Protection

Solution:

R3

Int e0/1

Ip ospf priority 255

End

Copy run start

R2

Int e0/1

Ip ospf network point-to-point

End

Copy run start

R10

Int e0/0

Ip ospf network point-to-point

End

Copy run start

Solution:

R2

config t

username NetworkAdmin privilege 15 password CiscoENCOR

line vty 0 4

login local

transport input telnet rlogin

exec-timepit 20

Solution:

R22

config t

int tunn0

vrf forwarding FINANCE

ip add 10.11.22.2 255.255.255.0

tunn so e0/0

tunn dest 209.165.200.230

no shut

int et0/1

vrf forward FINANCE

ip add 10.22.22.1 255.255.255.252

no shut

ip route vrf FINANCE 10.10.111.0 255.255.255.0 tunn0

wr