Free CCNA security online test for candidates who are preparing ccna security certifications| CCNA Security Free Online Quiz Part 1 Infibee.com

Instructions

Total Questions 20
Each question carry 1 mark
Must answer all the questions (otherwise report card will not be generated)
If you dont want to take a test, simply click the check answers button and view all the answers with explanations
Do Not Refresh the Page
No Time Limit
Good Luck :)

1. Which type of data is not often attractive to malicious actors?

A.
Personally identifiable information (PII)
B.
Training schedules
C.
Credit and debit card data
D.
Intellectual property (IP)

Correct Answers :

[B]

Explanation :

2. Which of the following is not used for identification of malware on the network?

A.
NetFlow
B.
IPS events
C.
Routing Information Base (RIB)
D.
Packet captures

Correct Answers :

[C]

Explanation :

3. NetFlow provides which of the following?

A.
Detailed data about each packet on the network
B.
Troubleshooting messages about the network devices
C.
Information on the types of traffic traversing the network
D.
Network names of routers, end hosts, servers

Correct Answers :

[C]

Explanation :

4. Which tool provides the most granular information to help in the identification of malware?

A.
NetFlow
B.
Syslog
C.
Packet capture
D.
Server logs

Correct Answers :

[C]

Explanation :

5. Which of the following is not a valid defense against social engineering?

A.
Two-factor authentication
B.
Information classification
C.
Infrastructure hardening
D.
Physical security

Correct Answers :

[C]

Explanation :

6. Which of the following could likely cause an ACS authentication failure, even when the user is using the correct credentials? (Choose all that apply.)

A.
Incorrect secret on the ACS
B.
Incorrect IP address of the ACS configured on the router
C.
Incorrect routing
D.
Incorrect filtering between the ACS and the router

Correct Answers :

[A, B, C, D]

Explanation :

7. From the router, which method tests the most about the ACS configuration, without forcing you to log in again at the router?

A.
ping
B.
traceroute
C.
test aaa
D.
telnet

Correct Answers :

[C]

Explanation :

8. Where in the ACS do you go to create a new group of administrators?

A.
Users and Identity Stores > Identity Groups
B.
Identity Stores > Identity Groups
C.
Identity Stores and Groups > Identity Groups
D.
Users and Groups > Identity Groups

Correct Answers :

[A]

Explanation :

9. Which statement is true for ACS 5.x and later?

A.
User groups are nested in network device groups.
B.
Authorization policies can be associated with user groups that are accessing specific network device groups.
C.
There must be at least one user in a user group.
D.
User groups can be used instead of device groups for simplicity.

Correct Answers :

[B]

Explanation :

10. With what can you configure AAA on the router? (Choose all that apply.)

A.
ACS
B.
CCP
C.
CLI
D.
TACACS+

Correct Answers :

[B, C]

Explanation :

11. Which is not an advantage of a cloud-based MDM solution?

A.
Scalability of the MDM solution
B.
Security of the overall MDM solution
C.
Flexibility in deploying the MDM solution
D.
Speed of deployment of MDM solution

Correct Answers :

[B]

Explanation :

12. Which is not an advantage of an On-Premise MDM solution?

A.
Higher level of control over the BYOD solution
B.
Ease of deployment and operation of the BYOD solution
C.
Ability to meet regulatory requirements
D.
Security of the overall BYOD solution

Correct Answers :

[B]

Explanation :

13. Which is not a function of mobile device management (MDM)?

A.
Enforce strong passwords on BYOD devices
B.
Deploy software updates to BYOD devices
C.
Remotely wipe data from BYOD devices
D.
Enforce data encryption requirements on BYOD devices

Correct Answers :

[B]

Explanation :

14. What is the primary purpose of the Integrated Services Routers (ISR) in the BYOD solution?

A.
Provide connectivity in the home office environment back to the corporate campus
B.
Provide WAN and Internet access for users on the corporate campus
C.
Enforce firewall-type filtering in the data center
D.
Provide connectivity for the mobile phone environment back to the corporate campus

Correct Answers :

[A]

Explanation :

15. The purpose of the certificate authority (CA) is to ensure what?

A.
BYOD endpoints are posture checked
B.
BYOD endpoints belong to the organization
C.
BYOD endpoints have no malware installed
D.
BYOD users exist in the corporate LDAP directory

Correct Answers :

[B]

Explanation :

16. Which method, when supported by both the client and the CA, is the simplest to use when implementing identity certificates on the client?

A.
PKCS#7
B.
PKCS#10
C.
SCEP
D.
LDAP

Correct Answers :

[C]

Explanation :

17. When obtaining the initial root certificate, what method should be used for validation of the certificate?

A.
Sender’s public key
B.
Telephone
C.
HTTPS/TLS/SSL
D.
Receiver’s private key

Correct Answers :

[B]

Explanation :

18. Which standard format is used to request a digital certificate from a CA?

A.
PKCS#7
B.
PKCS#10
C.
LDAP
D.
TLS/SSL/HTTPS

Correct Answers :

[B]

Explanation :

19. Which of the following could be found in a typical identity certificate? (Choose all that apply.)

A.
CRL locations
B.
Validity date
C.
Public key of the certificate owner
D.
Serial number

Correct Answers :

[A, B, C, D]

Explanation :

20. Which of the following is not a way for a client to check to see whether a certificate has been revoked?

A.
Look at the lifetime of the certificate itself
B.
CRL
C.
OSCP
D.
LDAP

Correct Answers :

[A]

Explanation :