CCIE Security Advanced Network Security Design Quiz

1. In a PKI infrastructure, what is the primary role of the Certificate Authority (CA)?

Generate user passwords

Issue and manage digital certificates

Monitor network traffic

Perform intrusion detection

2. Which protocol is used to securely manage network devices and is preferred over Telnet?

HTTP

SNMP v1

SSH

FTP

3. What is the primary purpose of a Security Operations Center (SOC)?

Design network topology

Monitor, detect, and respond to security incidents 24/7

Manage user email accounts

Configure DHCP servers

4. In network intrusion detection, what is the primary advantage of anomaly-based detection over signature-based detection?

Reduces false positives

Can detect unknown or zero-day attacks

Requires less processing power

Eliminates the need for logging

5. Which security framework provides comprehensive guidelines for managing enterprise IT security risks?

NIST Cybersecurity Framework

TCP/IP model

DNS protocol

DHCP specification

6. What is the primary difference between symmetric and asymmetric encryption?

Symmetric uses one key; asymmetric uses a public and private key pair

Asymmetric is faster than symmetric

Symmetric requires internet connectivity

Asymmetric cannot encrypt data

7. In threat modeling, what does STRIDE represent?

Spoofing, Tampering, Repudiation, Information Disclosure, Denial of Service, Elevation of Privilege

Scanning, Tracking, Reporting, Identification, Detection, Evaluation

Security, Traffic, Routing, Infrastructure, Deployment, Encryption

Segmentation, Testing, Remediation, Implementation, Documentation, Evaluation

8. What does the principle of least privilege mean in security design?

Grant all users administrator access

Users receive only minimum permissions needed for their role

Disable all security controls

Remove password requirements

9. Which firewall type maintains connection state information to make filtering decisions?

Packet-filtering firewall

Application-layer firewall

Stateful firewall

Proxy firewall

10. What is the primary benefit of implementing multi-factor authentication (MFA) in enterprise security?

Reduces bandwidth requirements

Adds multiple verification layers beyond passwords

Eliminates the need for firewalls

Improves network speed

11. Which encryption standard is recommended by NIST for protecting sensitive government data in next-generation security implementations?

AES-256

DES-64

RC4

MD5

12. Which cryptographic hash function is no longer recommended for security-critical applications?

SHA-256

SHA-512

MD5

BLAKE2

13. What vulnerability assessment technique involves executing actual exploits in a controlled environment?

Passive scanning

Penetration testing

Vulnerability scanning

Network traffic analysis

14. In network segmentation, what is the primary purpose of creating a demilitarized zone (DMZ)?

Increase network speed

Isolate public-facing services from internal networks

Reduce encryption requirements

Eliminate the need for VPNs

15. Which access control model provides the most granular permission management for complex enterprise environments?

Discretionary Access Control (DAC)

Mandatory Access Control (MAC)

Role-Based Access Control (RBAC)

Attribute-Based Access Control (ABAC)

16. What is the main function of a Security Information and Event Management (SIEM) system?

Replace all firewalls in the network

Aggregate, correlate, and analyze security logs from multiple sources

Encrypt all network traffic automatically

Block all external network connections

17. In IPsec, what does the Encapsulating Security Payload (ESP) header primarily protect?

Only IP header information

Payload confidentiality and integrity

DNS queries only

DHCP broadcast traffic

18. Which protocol is most secure for remote administrative access in enterprise environments?

Telnet

SSH with key-based authentication

HTTP

FTP

19. What is the primary advantage of implementing a defense-in-depth strategy across network layers?

Reduces overall network latency

Ensures multiple security controls mitigate breaches at different levels