| 1 | Which of the following security characteristics should be guaranteed to any enterprise-level organization (choose three)? | |||||||
| a. | Low cost | |||||||
| b. | Confidentiality | |||||||
| c. | Availability | |||||||
| d. | Free upgrades | |||||||
| e. | Integrity | |||||||
| 2 | Which of the following are valid network threats (choose all that apply)? | |||||||
| a. | DoS attacks | |||||||
| b. | OOB attacks | |||||||
| c. | Spoofing | |||||||
| d. | Viruses | |||||||
| e. | Routing | |||||||
| f. | Trojans | |||||||
| 3 | The main purpose of a Denial of Service attack is to make a network resource unavailable to its intended users. | |||||||
| a. | TRUE | |||||||
| b. | FALSE | |||||||
| 5 | What is the term used to describe the process of sending illegitimate requests by an attacker to a network request? | |||||||
| a. | Spoofing | |||||||
| b. | Logging | |||||||
| c. | Query | |||||||
| d. | Flooding | |||||||
| 6 | Which of the following are valid types of vulnerability scanning (choose three)? | |||||||
| a. | ICMP scanning | |||||||
| b. | SNMP scanning | |||||||
| c. | Syslog scanning | |||||||
| d. | BGP scanning | |||||||
| e. | TCP scanning | |||||||
| 7 | Which of the following are attributes that are specific to each security context within a firewall (choose three)? | |||||||
| a. | VPN configuration | |||||||
| b. | Security policy | |||||||
| c. | NAT rules | |||||||
| d. | Dynamic routing protocols configuration | |||||||
| e. | Access Control Lists | |||||||
| 8 | Which of the following features are NOT supported by common virtual firewalls (choose all that apply)? | |||||||
| a. | IPsec VPN | |||||||
| b. | Access Control Lists | |||||||
| c. | NAT rules | |||||||
| d. | SSL VPN | |||||||
| e. | Assigned interfaces | |||||||
| f. | Dynamic routing protocols | |||||||
| 9 | Which of the following are valid firewall failover link configuration methods (choose three)? | |||||||
| a. | LLDP | |||||||
| b. | Single physical link | |||||||
| c. | Virtual link | |||||||
| d. | Dual physical links | |||||||
| e. | Dual redundant physical links | |||||||
| 10 | Which of the following are valid private VLAN port roles (choose three)? | |||||||
| a. | Isolated | |||||||
| b. | Promiscuous | |||||||
| c. | Voice | |||||||
| d. | Community | |||||||
| e. | Independent | |||||||
| 11 | Which of the following private VLAN port types is usually connected to a router? | |||||||
| a. | Isolated | |||||||
| b. | Promiscuous | |||||||
| c. | Voice | |||||||
| d. | Community | |||||||
| e. | Independent | |||||||
| 12 | Which of the following is the first step in the zone-based firewall configuration process? | |||||||
| a. | Creating zone pairs | |||||||
| b. | Placing interfaces into security zones | |||||||
| c. | Creating security zones | |||||||
| d. | Configuring the modular security policy | |||||||
| 13 | Which of the following technologies is the zone-based firewall solution predecessor in terms of IOS firewall solutions? | |||||||
| a. | SNMP | |||||||
| b. | RIP | |||||||
| c. | CBAC | |||||||
| d. | CEF | |||||||
| 14 | The zone pairs in a zone-based firewall solution are bidirectional. | |||||||
| a. | TRUE | |||||||
| b. | FALSE | |||||||
| 15 | Which of the following is a network service that tries to guarantee that various endpoints are compliant with the network security policy enforced by network devices? | |||||||
| a. | SNMP | |||||||
| b. | RIP | |||||||
| c. | RTP | |||||||
| d. | NAC | |||||||
| e. | NTP | |||||||
| 16 | Which of the following is NOT a valid NAC deployment model? | |||||||
| a. | Layer 2 In-Band real IP gateway | |||||||
| b. | Layer 3 Out-of-Band | |||||||
| c. | Layer 4 In-Band | |||||||
| d. | Layer 2 Out-of-Band virtual gateway | |||||||
| e. | Layer 3 In-Band with multiple remote sites | |||||||
| 17 | Which of the following is a modern Cisco NAC product? | |||||||
| a. | ISP | |||||||
| b. | ISE | |||||||
| c. | IPS | |||||||
| d. | ISA | |||||||
| 18 | Which of the following are components of a generic NAC solution (choose two)? | |||||||
| a. | NAC framework | |||||||
| b. | NAC router | |||||||
| c. | NAC monitoring server | |||||||
| d. | NAC appliance | |||||||
| 19 | Which of the following is the dedicated Cisco IPS sensor appliance family? | |||||||
| a. | 4200/4300 | |||||||
| b. | 6500 | |||||||
| c. | 7200 | |||||||
| d. | 3800 | |||||||
| 20 | Which of the following are the most common SSL VPN deployment models (choose three)? | |||||||
| a. | Parallel design | |||||||
| b. | Inline design | |||||||
| c. | Out-of-Band design | |||||||
| d. | DMZ design | |||||||
| e. | Campus design | |||||||
| 21 | Which of the following devices can integrate firewall, VPN, and IPS functionalities? | |||||||
| a. | ISR router | |||||||
| b. | Catalyst switch | |||||||
| c. | ISE | |||||||
| d. | ASA device | |||||||