CCIE Security Flashcards

Which authentication protocol is used in 802.1X deployments where clients submit credentials through an EAP tunnel?

Answer: Both PEAP and EAP-FAST use tunneling

Both PEAP and EAP-FAST establish an encrypted TLS tunnel before transmitting credentials, protecting inner EAP methods from eavesdropping.

What is Cisco's Umbrella used for in a security architecture?

Answer: DNS-layer security and cloud-delivered secure internet gateway

Cisco Umbrella acts as a DNS-layer security solution, blocking malicious domains before connections are established, functioning as a cloud-delivered SIG.

In Cisco Firepower Management Center (FMC), what is an Access Control Policy used for?

Answer: Defining rules for traffic inspection, allowing, blocking, or redirecting traffic

Access Control Policies in FMC define rules that inspect, allow, block, or redirect traffic based on various criteria including identity, application, and URL.

Which Cisco ISE feature allows guest users to self-register and have their access approved by a sponsor?

Answer: Sponsored Guest Portal

The Sponsored Guest Portal in Cisco ISE allows guests to register for network access, which is then approved or denied by a designated employee sponsor.

What cryptographic protocol flaw makes TLS 1.0 and 1.1 deprecated for enterprise use?

Answer: Vulnerability to POODLE, BEAST, and other attacks due to weak cipher suites and CBC mode

TLS 1.0/1.1 are deprecated due to vulnerabilities like POODLE and BEAST that exploit weaknesses in CBC mode and RC4 cipher suites.

In Cisco ISE profiling, which probe collects device information based on DHCP option 55 (parameter request list)?

Answer: DHCP probe

The DHCP probe in ISE collects device fingerprinting information including DHCP option 55 (parameter request list) to identify device types.