Exam 350-401 topic 1 question 650 discussion

C and D are correct

C and D are correct

A. Network Address Translation (NAT): This feature is not exclusive to NextGen firewalls. Traditional firewalls commonly incorporate NAT functionalities. B. Secure remote access VPN (RA VPN): Similarly, this is not exclusive to NextGen firewalls. Both traditional and NextGen firewalls can offer secure remote access VPN capabilities. C. Deep packet inspection: NextGen firewalls often excel in deep packet inspection, allowing them to analyze and understand the contents of packets beyond the traditional packet header information. D. Reputation-based malware detection: NextGen firewalls typically employ more advanced methods like reputation-based detection to identify and block malicious activities. E. IPSec site-to-site VPN: Again, like RA VPN, this is not exclusive to NextGen firewalls. Both traditional and NextGen firewalls can support IPSec site-to-site VPNs. Deep packet inspection Reputation-based malware detection

Agree with provided answers, basically NGFW it is application control on layer 7 OSI, like skype, facebook games, icq, etc.

Provided answers are correct.