CCIE Security Infrastructure Troubleshooting Quiz

1. What is the primary role of a Security Information and Event Management (SIEM) system?

To block malicious traffic

To collect, aggregate, and analyze security logs

To encrypt network traffic

To manage user passwords

2. What is the primary advantage of using certificate-based authentication over password-based authentication?

Certificates are easier to remember

Certificates provide stronger security and are harder to compromise

Certificates require less storage

Certificates work without encryption

3. Which attack involves sending fragmented packets to evade intrusion detection systems?

Buffer overflow

IP fragmentation attack

DNS spoofing

ARP poisoning

4. What is the primary purpose of network segmentation in security architecture?

To increase network speed

To isolate critical assets and limit lateral movement

To reduce hardware costs

To simplify routing

5. What does the Cisco ASA appliance primarily provide?

Load balancing only

Firewall, VPN, and intrusion prevention

Routing only

DNS services

6. Which protocol is used for secure SMTP communication?

SMTP

SMTPS

POP3

IMAP

7. What is the main difference between stateful and stateless firewalls?

Stateful maintains connection context; stateless does not

Stateless is more secure

Stateful cannot filter applications

Stateless supports IPv6

8. What is the primary purpose of a Demilitarized Zone (DMZ) in network security?

To isolate public-facing services from internal networks

To encrypt all traffic between networks

To prevent all external access

To manage user authentication only

9. In a VPN context, what is the purpose of Perfect Forward Secrecy (PFS)?

To prevent session hijacking

To ensure session keys are not compromised if long-term keys are stolen

To increase encryption speed

To reduce bandwidth usage

10. What does TACACS+ provide that standard TACACS does not?

Encryption of all communication

Support for IPv6

Faster authentication

Built-in VPN capabilities

11. Which of the following is a key component of Zero Trust security architecture?

Never trust, always verify

Trust internal networks by default

Perimeter-based security only

Single sign-on for all users

12. What is the main advantage of using a next-generation firewall (NGFW) over traditional firewalls?

Lower cost

Application-level visibility and control

Simpler configuration

Faster packet processing

13. Which protocol is used for secure shell access to network devices?

Telnet

HTTP

SSH

SNMP

14. In IPSec, what is the primary function of the Authentication Header (AH)?

To encrypt data

To provide data origin authentication and integrity

To manage key exchange

To compress packets

15. What does RADIUS stand for in network authentication?

Remote Authentication Dial-In User Service

Remote Access Dial-In User Support

Rapid Authentication Data Integration Network Service

Remote Authorization and Identification User System

16. Which attack exploits trust relationships between systems on a network?

SQL injection

Lateral movement

DDoS attack

Phishing

17. Which Cisco security appliance specializes in advanced threat protection and sandboxing?

ASA

Firepower

IOS-XE

ACI

18. In cryptography, what is a digital signature primarily used for?

To encrypt messages

To verify authenticity and non-repudiation

To compress data

To increase bandwidth

19. In TLS/SSL, which component is responsible for encrypting the data after the handshake?

Record protocol

Handshake protocol

Alert protocol

Change cipher spec

20. Which encryption algorithm is considered the standard for modern symmetric encryption?

DES

AES

MD5

SHA-1