Cisco CCIE Security Written v4.0 (Beta) Set 3

Which standard prescribes a risk assessment to identify whether each control is required to decrease risks and if so, to which extent it should be applied?

EAP-MD5 provides one-way client authentication. The server sends the client a random challenge. The client proves its identity by hashing the challenge and its password with MD5. What is the problem with EAP-MD5?

With ASM, sources can launch attacks by sending traffic to any groups that are supported by an active RP.
Such traffic might not reach a receiver but will reach at least the first-hop router in the path, as well as the RP, allowing limited attacks. However, if the attacking source knows a group to which a target receiver is listening
and there are no appropriate filters in place, then the attacking source can send traffic to that group. This traffic is received as long as the attacking source is listening to the group.
Based on the above description, which type of security threat is involved?

Which option represents IPv6 address ff02::1?

Which statement describes an IPv6 benefit?

Which option is representative of automatic IP addressing in IPv4?

Which ICMP message type code indicates fragment reassembly time exceeded?

Which IPV4 header field increments every time when packet is sent from a source to a destination?

A device is sending a PDU of 5000 B on a link with an MTU of 1500 B. If the PDU includes 20 B of IP header, which statement is true?

Which statement about VLAN is true?