Exam SY0-701 topic 1 question 172 discussion

NGFW utilizing application inspection is the correct answer because it provides the necessary application-level awareness to detect and block HTTP traffic over non-standard ports, such as port 53. The NGFW's advanced inspection capabilities allow it to enforce security policies that prevent unauthorized data exfiltration, making it an essential component of modern network security infrastructure.

WAF - Web App Firewall NGFW - Next Generation Firewall UTM - Unified Threat Management SD-WAN - Software defined Wide area network

NGFW utilizing application inspection is the correct answer because it provides the capability to identify and block unauthorized applications and traffic using non-standard ports, such as HTTP traffic over port 53. Its advanced inspection capabilities make it well-suited to detect and prevent data exfiltration methods that involve protocol and port misuse.

B. NGFW utilizing application inspection A Next-Generation Firewall (NGFW) utilizing application inspection could have identified and blocked the use of HTTP over port 53. NGFWs have advanced capabilities that allow them to inspect and identify traffic based on the application layer, not just the port and protocol, enabling them to detect and prevent non-standard use of ports for malicious activities. Therefore, the correct answer is: B. NGFW utilizing application inspection

B. NGFW utilizing application inspection