Next-Generation Firewall Configuration Quiz

What you'll be asked

1. Which of the following is the primary advantage of a Next-Generation Firewall (NGFW) over a traditional stateful packet inspection firewall?
2. When configuring an NGFW to block encrypted malicious traffic, which feature must be enabled to inspect the payload of HTTPS packets?
3. You are configuring a security policy on an NGFW. What is the recommended best practice for 'Order of Operations' when creating rules?
4. An administrator wants to implement User-ID on a firewall to enforce policies based on identity rather than IP addresses. Which mechanism is commonly used to map IP addresses to usernames?
5. A packet arrives at an NGFW. The firewall identifies the application as 'web-browsing' but the traffic is using a non-standard port (e.g., TCP 8080). If the policy is set to 'App-ID: web-browsing, Port: 80', what will the NGFW do by default?

Answers and explanations come after you submit.