CCIE CCIE Security 3

Question 1

Which authentication protocol is used in 802.1X deployments where clients submit credentials through an EAP tunnel?

Accepted Answer

Both PEAP and EAP-FAST use tunneling

Answer

EAP-MD5

Answer

PEAP (Protected EAP)

Answer

EAP-FAST

Question 2

What is Cisco's Umbrella used for in a security architecture?

Accepted Answer

DNS-layer security and cloud-delivered secure internet gateway

Answer

On-premises firewall management

Answer

Endpoint antivirus

Answer

Network access control

Question 3

In Cisco Firepower Management Center (FMC), what is an Access Control Policy used for?

Accepted Answer

Defining rules for traffic inspection, allowing, blocking, or redirecting traffic

Answer

Managing VPN tunnels only

Answer

Configuring HA clustering

Answer

Managing SSL certificates

Question 4

Which Cisco ISE feature allows guest users to self-register and have their access approved by a sponsor?

Accepted Answer

Sponsored Guest Portal

Answer

802.1X EAP-TLS

Answer

Certificate Provisioning

Answer

Profiling

Question 5

What cryptographic protocol flaw makes TLS 1.0 and 1.1 deprecated for enterprise use?

Accepted Answer

Vulnerability to POODLE, BEAST, and other attacks due to weak cipher suites and CBC mode

Answer

Key length limitations only

Answer

Lack of certificate support

Answer

Incompatibility with modern hardware

Question 6

In Cisco ISE profiling, which probe collects device information based on DHCP option 55 (parameter request list)?

Accepted Answer

DHCP probe

Answer

RADIUS probe

Answer

HTTP probe

Answer

NetFlow probe