CCNA Security Questions And Answers

Defense in Depth Least Privilege - Answer- Which two approaches to security provide the most secure results on day one? So that both peers will be able to verify the signature of the CA - Answer- Why is a common CA important for two VPN devices that want to authenticate using digital certificates? Frame Relay subinterface - Answer- What is not a subinterface that can be leveraged as part of control plane protection? Web Cache Communication Protocol (WCCP) - Answer- What protocol would an ASA use to talk with a Cisco WSA (Web Security Appliance)? Enable secret password - Answer- Which password methods features the strongest encryption? Management Plane Control Plane Data Plane - Answer- Which components are a core component of the Network Foundation Protection architecture? IKEv1 IKEv2 - Answer- What versions of IKE are supported by the Cisco ASA? Man-in-the-Middle attack Reconnaissance Attack Denial-of-service Attack - Answer- Which types of attacks can you mitigate by authenticating a routing protocol? Packet Filtering - Answer- Which firewall methodology requires the administrator to know and configure all the specific ports, IPs, and protocols required for the firewall? Information on the types of traffic traversing the network - Answer- What does NetFlow provide? Auto Secure - Answer- What feature, at the CLI on IOS, has a function similar to the Security Audit feature in CCP? RIPv2 and EIGRP - Answer- Which two routing protocols make use of a key chain for authentication? 3DES and AES - Answer- What algorithms in a VPN provide the confidentiality?