Practice Test GeeksCisco ENCOR Practice Test
← All Cisco ENCOR Flashcard Decks

Infrastructure Security Flashcards

6 cards from real Cisco ENCOR practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.

Read the first 6 Infrastructure Security flashcards as text

  1. Which Cisco feature automatically shuts down a switchport when a BPDU is received on a PortFast-enabled port?

    Answer: BPDU Guard

    BPDU Guard disables a PortFast-enabled port upon receiving a BPDU, protecting the STP topology from unauthorized switches.

  2. What is the purpose of Unicast Reverse Path Forwarding (uRPF) in strict mode?

    Answer: Verify that the return path for a packet's source IP goes back out the same interface

    Strict uRPF drops packets if the best return path to the source IP is not through the same interface the packet arrived on, preventing IP spoofing.

  3. Which type of VPN uses IPsec in tunnel mode to protect traffic between two site gateways?

    Answer: Site-to-site VPN

    Site-to-site VPNs use IPsec tunnel mode to encapsulate and encrypt entire IP packets between two gateway routers.

  4. In IKEv2, what does the term 'IKE_AUTH' exchange accomplish?

    Answer: Authenticates peers and creates the first Child SA (IPsec SA)

    The IKE_AUTH exchange authenticates both peers using certificates or pre-shared keys and establishes the first Child SA for IPsec.

  5. What is the primary function of MACsec (IEEE 802.1AE)?

    Answer: Encrypt and integrity-protect traffic at Layer 2 on a hop-by-hop basis

    MACsec provides line-rate Layer 2 encryption and integrity verification between directly connected devices on each hop.

  6. Which command enables TACACS+ as the authentication method for console login on a Cisco IOS device?

    Answer: aaa authentication login default tacacs+

    The command 'aaa authentication login default tacacs+' sets TACACS+ as the default method list for all login authentication.

How this page was made: written with AI tools and published by Nathan Beja, founder of Practice Test Geeks, who is responsible for its content. Exam facts are checked against the official sources listed below. Not reviewed by a subject-matter expert. Editorial policy

Sources & references

Exam facts on this page (fees, format, dates, passing scores) are checked against these official sources; the date is our last check. Editorial policy

  1. cisco.com — Eligibility, renewal, score validity, test delivery, fees, time limit · verified Oct 2026