Cisco CCIE Security Written

1.

Which Category to Protocol mapping for NBAR is correct?

Category: Network Mail Services
Protocol: MAPI,POP3,SMTP Category: Entreprise ApplicationsProtocol: Citrix ICA, PCAnywhere,SAP,IMAP Category: Network ManagementProtocol: ICMP,SNMP,SSH,Telent Category: InternetProtocol: FTP,HTTP,TFTP

2.

You run the show ipv6 port-map telnet command and you see that the port 23 (system-defined) message and the port 223 (user-defined) message are displayed.
Which command is in the router configuration?

ipv6 port-map port 23 port 23223 ipv6 port-map port telnet 223 ipv6 port-map telnet port 23 233 ipv6 port-map telnet port 223

3.

What is an RFC 2827 recommendation for protecting your network against Dos attack with IP address spoofing?

Broweser based application should be filtered on the source to protect your network from known advertised prefixes Advertise only assigned global IP adddress to the internet Use ingress filtering to limit traffic from downstream network to known advertised prefixes Use the TLS protocol to secure the network against easedropping

4.

In RFC 4034, DNSSEC introduced which four new resource record type? (choose four)

DNS Public Key (DNSKEY) Top Level Domain (TLD) Delegation Signer (DS) Next Secure (NSEC) Ressource Record Signature (RRSIG)

5.

In Cisco Wireless LAN Controller (WLC), which web policy enables failed Layer 2 authentication to fall back to Web Auth authentication with a user name and password?

Splash Page Web Redirect Passthrough On MAC Filter Failure Authentication Conditional Web Redirect

6.

Which ASA device is designated as the cluster master?

The ASA with highest MAC address The ASA with the lowest MAC address The ASA configured with highest priority value The ASA configured with the lowest priority value

7.

Which configuration is the correct way to change a GET VPN Key Encryption Key ;lifetime to 10800 seconds on the key server

crypto ipsec security association life-time seconds 10800 crypto ipsec profile getvpn-profileset security-association lifetime seconds 10800
!
crypto gdoi group GET-Group

identity number 1234
server local sa ipsec 1
profile getvpn-profile crypto isakmp policy 1lifetime 10800 crypto gdoi group FETP-Groupidentity number 1234
server local
set security association lifetime seconds 10800 crypto gdoi group GET Groupiidentity 123
server local
rekey lifetime seconds 10800

8.

Why do you use a disk image backup to perform forensic investigation?

The backup includes areas that are used for the data store The backup creates a bit-level copy of the entire disk The backup timestamps the files with the date and time during copy operations The issecure way to perform a file copy

9.

What Cisco IOS feature prevents an attacker from filling up the MTU cache for locally genrated traffic when using path MTU discovery

Force all traffic to send 1280-bytes packets by hard coding the MSS Use netflow information to export data to a workstation Enable flow-label marking to track packet destination Enable flow-label switching to track IPv6 packets in the MPLS cloud Always use packets of 1500 bytes size or larger

10.

Which command enables fast-switched PBR?

router(config-if)# ip policy route-map map-tag router(config-if)# no ip policy route-map map-tag router(config-if)# ip route-cache policy router(config-if)# no ip route-cache policy

Cisco CCIE Security Written

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Congratulations

COMPANY

Products

OTHERS

Partner

Cisco CCIE Security Written

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Congratulations

Detail Form

COMPANY

Products

OTHERS

Partner