CCIE CCIE Security

Question 1

Which Cisco technology provides identity-based network access control using 802.1X, MAB, and Web Auth?

Accepted Answer

Cisco ISE (Identity Services Engine)

Answer

Cisco ISE is a policy engine that provides identity-based access control using 802.1X, MAC Authentication Bypass (MAB), and Web Authentication.

Question 2

In Cisco ASA, what is the default security level for the 'inside' interface?

Accepted Answer

100

Answer

The inside interface on Cisco ASA has a default security level of 100 (highest), while outside is 0 (lowest), controlling traffic flow.

Question 3

What is the primary difference between stateful and stateless firewalls?

Accepted Answer

Stateful firewalls track connection state; stateless only inspect individual packets

Answer

Stateful firewalls maintain a connection table to track session state, allowing return traffic automatically; stateless firewalls inspect each packet in isolation.

Question 4

Which Cisco Firepower feature provides advanced malware protection by continuously analyzing file behavior after initial inspection?

Accepted Answer

AMP (Advanced Malware Protection) retrospective analysis

Answer

AMP retrospective analysis continues monitoring files after they pass initial inspection, allowing Firepower to detect malware even after files enter the network.

Question 5

In Cisco IOS, what command enables Zone-Based Firewall policy between two security zones?

Accepted Answer

zone-pair security

Answer

The 'zone-pair security' command defines the direction of traffic flow between zones and applies the service policy map in Cisco ZBF.

CCIE - Cisco Certified Internetwork Expert Practice Test

CCIE - Cisco Certified Internetwork Expert Practice Test

CCIE CCIE Security