Same for: 10.3.9 Check Your Understanding – Identify the NextGen Firewall Event Types
1. What type of event occurs when malicious activity that can affect the availability, integrity and confidentiality of a host and its data occurs?
- Intrusion
- Host or Endpoint
- NetFlow
- Configuration
- Network Discovery
- Connection
Explanation: Intrusion events are logged when malicious activity occurs.
2. What kind of event is logged when a host first appears on the network?
- Intrusion
- Host or Endpoint
- NetFlow
- Configuration
- Network Discovery
- Connection
Explanation: Host or endpoint events are logged when a computer appears on the network.
3. What type of event is used when NetFlow detects a new host on the network?
- Intrusion
- Host or Endpoint
- NetFlow
- Configuration
- Network Discovery
- Connection
Explanation: NetFlow events are derived from exported flow records that indicate that a new host has joined the network
4. Which type of events concern sessions between hosts that is discovered by the NextGen Firewall directly?
- Intrusion
- Host or Endpoint
- NetFlow
- Configuration
- Network Discovery
- Connection
Explanation: Connection events concern session between hosts that were discovered by the NextGen Firewall directly.
5. What type of event occurs when changes are detected to network hosts and applications that are known to the network?
- Intrusion
- Host or Endpoint
- NetFlow
- Configuration
- Network Discovery
- Connection
Explanation: Network Discovery events are logged when changes occur to hosts or application that are known on the network.