CISCO CCNA Security Test

Approved & Edited by ProProfs Editorial Team

The editorial team at ProProfs Quizzes consists of a select group of subject experts, trivia writers, and quiz masters who have authored over 10,000 quizzes taken by more than 100 million users. This team includes our in-house seasoned quiz moderators and subject matter experts. Our editorial experts, spread across the world, are rigorously trained using our comprehensive guidelines to ensure that you receive the highest quality quizzes.

Learn about Our Editorial Process

| By Achmad Sagaf

Achmad Sagaf

Community Contributor

Quizzes Created: 3 | Total Attempts: 18,137

Questions: 50 | Attempts: 2,556 | Updated: Feb 13, 2024

Questions

Settings

Feedback

During the Quiz End of Quiz

Play as

Quiz Flashcard

Create your own Quiz

Questions and Answers

Quiz Review Timeline +

Our quizzes are rigorously reviewed, monitored and continuously updated by our expert board to maintain accuracy, relevance, and timeliness.

Current Version
Feb 13, 2024

Quiz Edited by
ProProfs Editorial Team
Dec 13, 2014

Quiz Created by
Achmad Sagaf

CISCO CCNA Security Test

Which VPN component ensures that data cannot be read while in transit?Select one:

Which two places are valid logging destinations?Select one:

Review the following code snippet: aaa new-model aaa authentication login default group tacacs+ enable tacacs-server host 192.168.1.20 tacacs-server key T@C@c$P@ssW0rd!What is the password the TACACS server must use to establish a valid connection to the router?Select one:

Which plane is used to access, configure and manage a router?Select one:

Which option will disable the Daytime service on a Cisco router?Select one:

Which of the following IP addresses are considered private? Choose all correct answers.Select one or more:

Which of the following is NOT considered best security practice when hardening Cisco IOS devices?Select one:

In a security context what does CIA stand for?Select one:

What would be the end result if the management plane of your router was compromised?Select one:

Review the following code snippet and answer the statement at the bottom: line aux 0 transport input none transport output none no exec exec-timeout 0 1 no passwordThis code will result in the console port being disabled.Select one:

Consider the following code and answer the question below:interface ethernet 0ip access-group no_web outip access-list extended no_webdeny host 172.20.3.85 any eq httpdeny host 172.20.3.13 any eq httppermit 172.20.0.0 0.0.255.255 any eq httpIn what direction is the access-list applied?Select one:

Which one of the following wildcard masks will match exactly all hosts on the 172.16.0.0/24 and 172.16.1.0/24 subnets?Select one:

What type of access list allows IP packets to be filtered based on upper-layer session information?Select one:

What is another name for Lock & Key access lists?Select one:

Which of the following answers describes CBAC?Select one:

Which item represents the standard IP ACL?Select one:

A network administrator is configuring ACLs on a Cisco router, to allow traffic from hosts on networks 172.17.146.0, 172.17.147.0, 172.17.148.0, and 172.17.149.0 only. Which two ACL statements, when combined, would you use to accomplish this task? (Choose two)

Which statement about access lists that are applied to an interface is true?Select one:

You want to allow a temporary entry for a remote user with a specific username and password so that the user can access the entire network over the internet. Which ACL can be used?Select one:

What is the first step you should take when trying to secure your network?Select one:

Which of the following is enabled when RSA keys are generated? Select one:

If you're using an extended ACL to block traffic to a server located on the remote side of your WAN, where should you place the ACL? Choose the two best answers.Select one or more:

Which technology dynamically builds a table for the purpose of permitting thereturn traffic from an outside server, back to the client, in spite of a default securitypolicy that says no traffic is allowed to initiate from the outside networks?Select one:

What term refers to the internal IP address of a client using NAT as seen from other devices on the same internal network as the client?Select one:

If interface number 1 is in zone A, and interface number 2 is in zone B, and there is no policy or service commands applied yet to the configuration, what is the status of transit traffic that is being routed between these two interfaces?Select one:

What is the default policy between an administratively created zone and the self zone?Select one:

Why is it that the return traffic, from previously inspected sessions, is allowed back to the user, in spite of not having a zone pair explicitly configured that matches on the return traffic?Select one:

How does IPS have the ability to prevent an ICMP-based attack from reaching the intended victim?Select one:

Which method should you implement when it is not acceptable for an attack to reach its intended victim?Select one:

Which method of IPS uses a baseline of normal network behaviour and looks for deviations from that baseline?Select one:

Because of how a router operates, which IPS/IDS mode does it operate in?Select one:

Which of the following are examples of tuning a signature? (Choose all that apply.)Select one or more:

Why is it considered a best practice to avoid compiling, enabling, and running all available signatures? (Choose all that apply.)Select one or more:

What element in a VPN provides the Privacy?Select one:

What algorithms in a VPN provide the confidentiality? (Choose all that apply.)Select one or more:

Which type of VPN technology is likely to be used in a site-to-site VPN?Select one:

Why is the public key in a typical public-private key pair referred to as public?Select one:

Which of the following are negotiated during IKE Phase 1? (Choose all that apply.)Select one or more:

How is the negotiation of the IPsec (IKE Phase 2) tunnel done securely?Select one:

How is it possible that a packet with a private Layer 3 destination address is forwarded over the Internet?Select one:

Which of the following would cause a VPN tunnel using IPsec to never initialize or work correctly? (Choose all that apply.)Select one or more:

Which of the following are defense-in-depth approaches? (Choose all that apply.)Select one or more:

What is the term for tricking a user into revealing sensitive or confidential information, including information about user credentials?Select one:

Which device can analyze network traffic in real time, generate alerts, and even prevent the first malicious packet from entering the network?Select one:

What happens when an access list has 100 lines and a match occurs on line 14?Select one:

Which of the following is not a best practice to protect the management plane?(Choose all that apply.)Select one or more:

Which one of the following follows best practices for a secure password? Select one:

How can you implement role-based access control (RBAC)? (Choose all that apply.)Select one or more:

Which of the following enables you to protect the data plane? (Choose all that apply.)Select one or more: