CCIE CCIE Security

Question 1

Which Cisco technology provides identity-based network access control using 802.1X, MAB, and Web Auth?

Accepted Answer

Cisco ISE (Identity Services Engine)

Answer

Cisco ASA

Answer

Cisco Firepower

Answer

Cisco DNA Center

Question 2

In Cisco ASA, what is the default security level for the 'inside' interface?

Accepted Answer

100

Answer

0

Answer

50

Answer

255

Question 3

What is the primary difference between stateful and stateless firewalls?

Accepted Answer

Stateful firewalls track connection state; stateless only inspect individual packets

Answer

Stateful firewalls are faster

Answer

Stateless firewalls support more protocols

Answer

Stateful firewalls only work at Layer 3

Question 4

Which Cisco Firepower feature provides advanced malware protection by continuously analyzing file behavior after initial inspection?

Accepted Answer

AMP (Advanced Malware Protection) retrospective analysis

Answer

URL filtering

Answer

Intrusion Prevention (IPS)

Answer

SSL decryption

Question 5

In Cisco IOS, what command enables Zone-Based Firewall policy between two security zones?

Accepted Answer

zone-pair security

Answer

ip inspect

Answer

access-list extended

Answer

policy-map type inspect

Question 6

What is the purpose of Cisco TrustSec SGT (Security Group Tags)?

Accepted Answer

Policy enforcement based on user/device identity rather than IP

Answer

VLAN assignment for QoS

Answer

Encryption of data center traffic

Answer

Load balancing across ASA clusters