A review of the company’s network traffic shows that most of the malware infections are caused by
users visiting gambling and gaming websites. The security manager wants to implement a solution
that will block these websites, scan all web traffic for signs of malware, and block the malware
before it enters the company network. Which of the following is suited for this purpose?

A.
ACL

B.
IDS

C.
UTM

D.
Firewall

Explanation:
An all-in-one appliance, also known as Unified Threat Management (UTM) and Next Generation
Firewall (NGFW), is one that provides a good foundation for security. A variety is available; those
that you should be familiar with for the exam fall under the categories of providing URL filtering,
content inspection, or malware inspection.
Malware inspection is the use of a malware scanner to detect unwanted software content in
network traffic. If malware is detected, it can be blocked or logged and/or trigger an alert.