Cisco ENCOR Infrastructure Security

Question 1

What is the purpose of Control Plane Policing (CoPP) on a Cisco router?

Accepted Answer

Rate-limit traffic destined to the route processor

Answer

CoPP protects the router's control plane by rate-limiting or dropping traffic directed to the route processor to prevent DoS attacks.

Question 2

Which Cisco IOS feature can detect and block rogue DHCP servers on a LAN segment?

Accepted Answer

DHCP Snooping

Answer

DHCP Snooping filters DHCP messages, trusting only designated ports and blocking rogue DHCP server responses on untrusted ports.

Question 3

In a Zone-Based Firewall (ZBF), what happens to traffic between two zones that have no zone-pair policy defined?

Accepted Answer

Traffic is dropped

Answer

In ZBF, traffic between zones is implicitly denied unless a zone-pair with a service policy explicitly permits or inspects it.

Question 4

What does AAA stand for in Cisco network security?

Accepted Answer

Authentication, Authorization, Accounting

Answer

AAA stands for Authentication (who you are), Authorization (what you can do), and Accounting (what you did).

Question 5

Which protocol does Cisco TACACS+ use for transport?

Accepted Answer

TCP port 49

Answer

TACACS+ uses TCP port 49 for reliable transport and encrypts the entire packet body.

Cisco ENCOR Practice Test