QUIZ: CCNA Security Second Edition Part 2

When one of the following is supposed to be the best time to perform an anti-virus signature update?

Which of the following statement is true about application blocking?

What action would you take to block users from accidentally visiting the URL and becoming infected with malware if a specific URL has been identified as containing malware?

Which of the following three features can protect the data plane? (Choose three.)

In How many numbers can you apply crypto map sets to a router interface?

Which of the following represents the correct transition order of STP states on a Layer 2 switch interface?

What is the effect on the company’s business, when a company puts a security policy in place?

Which of the following statements are true about reflexive access lists? (Choose any three.)

Which three of the following actions can a promiscuous IPS take to mitigate an attack? (Choose any three.)

Which of the following Cisco Security Manager application collects information about device status and uses it to generate notifications and alerts?

Which two of the following accounting notices are used to send a failed authentication attempt record to a AAA server? (Choose any two.)

Which of the following command is used to enable SSH support on a Cisco Router?

Which of the following protocol provides security to Secure Copy?

Which of the following security zone is automatically defined by the system?

What purpose does Internet Key Exchange in an IPsec VPN serves? (Choose any two.)

Which of the following address block is reserved for locally assigned unique local addresses?

For which of the following reason the error message Router(config)#aaa server?% Unrecognized command occurs?

What will be the potential consequence, if the native VLAN on a trunk is different on each end of the link?

When you apply an access list to a physical interface, which of the following option describes information that must be considered?

Which one of the following source port does IKE use when NAT has been detected between two VPN gateways?

Which three of the following features are of IPsec transport mode? (Choose any three.)

Which of the following command makes a Layer 2 switch interface to operate as a Layer 3 interface?

Which of the following security term refers to a person, property, or data of value to a company?

Which of the following technology you can use to prevent non malicious program to run in the computer that is disconnected from the network?

Which of the following command enable ospf authentication?

Which of the following command help user1 to use enable, disable, exit commands?

Which of the following two NAT types allows only objects or groups to reference an IP address? (choose two)

Which of the following port in a PVLAN can communicate with every other ports?

Which two of the following given commands result in a secure bootset? (Choose any two.)

What one of the following is an example of social engineering?

Which of the following prevent the company data from modification even when the data is in transit?

Which one is an example of SYN flood attack?

Which of the following type of an IPS can identify worms that are propagating in a network?

Which of the following command verifies phase 1 of an IPsec VPN on a Cisco router?

Which of the following type of firewall can act on the behalf of the end device?

In which of the following threat, the victim tricked into entering username and password information at a disguised website?

Which of the following type of mirroring does SPAN technology perform?

Which of the following network device does NTP authenticate?

Which of the following Cisco product can help mitigate web-based attacks within a network?

Which of the following statement correctly describes the function of a private VLAN?

Which of the following hash type does Cisco use to validate the integrity of downloaded images?

Which of the following Cisco feature can help us to mitigate spoofing attacks by verifying symmetry of the traffic path?

Which one the following is the most common Cisco Discovery Protocol version 1 attack?

Which of the following is the Cisco preferred countermeasure to mitigate CAM overflows?

Which one of the following option is the most effective placement of an IPS device within the infrastructure?

Which of the following events will occur when the TACACS+ server returns an error, if a router configuration includes the line aaa authentication login default group tacacs+ enable? (Choose anytwo.)

Which of the following alert protocol is used with Cisco IPS Manager Express to support up to 10 sensors?

What is the first step that STP takes to prevent loops, when a switch has multiple links connected to a downstream switch?

Which of the following type of network address translation should be used when a Cisco ASA is in transparent mode?

Which of the following components does HMAC use to determine the authenticity and integrity of a message? (Choose any two.)