Cisco Certified Network Associate (CCNA) Practice Exam

Which type of Cisco firewall is software that operates on routers and features Context-Based Access Control?

1. Cisco ASA Firewalls

2. Cisco IOS Firewalls

3. Cisco Firepower Firewalls

4. Cisco NGFW

The correct answer is: Cisco IOS Firewalls

The type of Cisco firewall that operates as software on routers and features Context-Based Access Control is the Cisco IOS Firewall. This firewall is integrated into the Cisco IOS software running on Cisco routers, providing security mechanisms directly at the network layer. Context-Based Access Control (CBAC) allows this firewall to examine the contents of IP packets and make decisions based on the state of the connection. This means it can dynamically open and close ports in real time based on the context of the connection, rather than using static rules. This behavior is significant for enhancing security while allowing legitimate traffic to flow seamlessly. In contrast, other firewalls mentioned, like Cisco ASA Firewalls and Cisco Firepower Firewalls, operate independently of the router's operating system and typically include more advanced features such as intrusion prevention, advanced malware protection, and application visibility. Cisco Next-Generation Firewalls (NGFW) represent a broader category that integrates these advanced capabilities, including application-level inspection, making them distinct from the functionality offered by the Cisco IOS Firewall operating directly on routers.