CCIE CCIE Security 3

Question 1

Which authentication protocol is used in 802.1X deployments where clients submit credentials through an EAP tunnel?

Accepted Answer

Both PEAP and EAP-FAST use tunneling

Answer

Both PEAP and EAP-FAST establish an encrypted TLS tunnel before transmitting credentials, protecting inner EAP methods from eavesdropping.

Question 2

What is Cisco's Umbrella used for in a security architecture?

Accepted Answer

DNS-layer security and cloud-delivered secure internet gateway

Answer

Cisco Umbrella acts as a DNS-layer security solution, blocking malicious domains before connections are established, functioning as a cloud-delivered SIG.

Question 3

In Cisco Firepower Management Center (FMC), what is an Access Control Policy used for?

Accepted Answer

Defining rules for traffic inspection, allowing, blocking, or redirecting traffic

Answer

Access Control Policies in FMC define rules that inspect, allow, block, or redirect traffic based on various criteria including identity, application, and URL.

Question 4

Which Cisco ISE feature allows guest users to self-register and have their access approved by a sponsor?

Accepted Answer

Sponsored Guest Portal

Answer

The Sponsored Guest Portal in Cisco ISE allows guests to register for network access, which is then approved or denied by a designated employee sponsor.

Question 5

What cryptographic protocol flaw makes TLS 1.0 and 1.1 deprecated for enterprise use?

Accepted Answer

Vulnerability to POODLE, BEAST, and other attacks due to weak cipher suites and CBC mode

Answer

TLS 1.0/1.1 are deprecated due to vulnerabilities like POODLE and BEAST that exploit weaknesses in CBC mode and RC4 cipher suites.

CCIE - Cisco Certified Internetwork Expert Practice Test

CCIE - Cisco Certified Internetwork Expert Practice Test

CCIE CCIE Security 3