CCIE Security Secure Access Architecture Quiz

1. Which protocol is used for secure remote access and is often preferred over Telnet?

SSH

Telnet

HTTP

FTP

2. Which access control model grants permissions based on user roles within an organization?

Discretionary Access Control (DAC)

Role-Based Access Control (RBAC)

Attribute-Based Access Control (ABAC)

MAC

3. In secure access architecture, what does Single Sign-On (SSO) enable?

Multiple password entries for each application

Access to multiple applications with one authentication

Elimination of encryption

Bypass of security policies

4. What does the principle of least privilege require in access control?

Grant maximum permissions to all users

Grant only necessary permissions for job functions

Remove all access restrictions

Allow guest access everywhere

5. Which Cisco product is primarily used for threat detection and prevention at the network edge?

Cisco ISE

Cisco ASA

Cisco Prime

Cisco DNA Center

6. In IPsec tunnel mode, which layers of the packet are encrypted?

Layer 2 only

Layer 3 and above

Layer 4 only

Physical layer

7. What is multi-factor authentication (MFA) primarily designed to enhance?

Network bandwidth

User authentication security

Data encryption

VPN speed

8. Which Cisco technology provides identity-based access control using application-level policies?

Cisco Catalyst switches

Cisco Identity Services Engine

Cisco Nexus firewalls

Cisco ACI

9. In a secure access architecture, what is the purpose of endpoint detection and response (EDR)?

Manage DNS queries

Monitor and respond to endpoint threats

Encrypt all network traffic

Manage IP addresses

10. What does 802.1X provide in network access control?

Port-based network access control

Wireless encryption

Firewall filtering

DDoS protection

11. Which authentication protocol uses a three-way handshake and is commonly deployed in 802.1X port-based access control?

EAP

RADIUS

TACACS+

Kerberos

12. In Cisco ISE, what is a posture policy used to verify?

User credentials

Device compliance with security standards

Network bandwidth

VPN connection quality

13. Which authentication method uses a digital certificate issued by a trusted Certificate Authority?

Password-based authentication

Biometric authentication

Public key infrastructure (PKI)

Single-factor authentication

14. What is the primary role of a RADIUS server in network access control?

Encrypt VPN tunnels

Authenticate users and authorize network access

Manage firewall rules

Monitor bandwidth usage

15. In IPsec, which protocol provides encryption and integrity for data payloads?

AH

ESP

IKE

ISAKMP

16. Which VPN protocol operates at Layer 2 and is often used for remote access in legacy environments?

IPsec

L2TP

GRE

MPLS

17. What does TACACS+ primarily use for authentication and authorization in enterprise networks?

UDP port 161

TCP port 49

UDP port 1812

TCP port 443

18. Which Cisco Identity Services Engine (ISE) deployment mode provides centralized policy management for multiple sites?

Standalone

Distributed

Primary and Secondary

Mesh topology

19. In zero-trust architecture, which principle assumes that no user or device is inherently trusted?

Trust but verify

Verify every access request

Trust internal networks

Perimeter-based security

20. What is the primary purpose of Network Access Control (NAC) in a secure access architecture?