Which two inspection modes can you use to configure a firewall policy on a profile-based next-generation firewall (NGFW)? (Choose two.)

Which two inspection modes can you use to configure a firewall policy on a profile-based next-generation firewall (NGFW)? (Choose two.)

A. Proxy-based inspection

B. Certificate inspection

C. Flow-based inspection

D. Full Content inspection

View Answer

Answer: A,C

Explanation:

The two inspection modes that you can use to configure a firewall policy on a profile-based next-generation firewall (NGFW) are:

A. Proxy-based inspection

Proxy-based inspection involves buffering and inspecting the entire content of the traffic before allowing

it through. It offers in-depth content analysis.

C. Flow-based inspection

Flow-based inspection involves inspecting the traffic based on predefined signatures and patterns

without buffering the entire content. It optimizes performance compared to proxy-based inspection.

So, the correct choices are A and C.

Profile based – Flow or proxy based.

Policy based – flow only.