Cisco Certified Network Professional Security

Questions 1–5 6–10 11–15 16–20 21–25 26–30 31–35

1.5 Describe cryptography security components such as hashing, encryption, PKI, SSL, TLS, QUIC, MASQUE, IPsec, NAT-T IPv4 for IPsec, preshared key, certificate-based authorization, and post-quantum cryptography

35 questions · 7 pages

1.6 Describe site-to-site and remote access VPN deployment types such as virtual tunnel interfaces, standards-based IPsec, SSL VPN, DMVPN, FlexVPN, and GETVPN

30 questions · 6 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–30

1.8 Describe zero trust architecture

26 questions · 6 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–27

1.9 Describe defense in depth strategy such as Secure Architecture for Everyone (SAFE)

27 questions · 6 pages

1.10 Interpret scripts used to call security appliances APIs in a language such as Python

24 questions · 5 pages

Questions 1–5 6–10 11–15 16–20 21–25

2.1 Describe network security solutions and deployment models that provide intrusion prevention and firewall capabilities

25 questions · 5 pages

2.2 Describe security monitoring and telemetry technologies

42 questions · 9 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–30 31–35 36–40 41–42

2.3 Configure network infrastructure security methods (network segmentation using VLANs or SGTs; Layer 2 and port security; DHCP snooping; Dynamic ARP inspection; storm control; and defenses against MAC, ARP, VLAN hopping, STP, and DHCP rogue attacks)

34 questions · 7 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–30 31–34

2.4 Select management options for network security solutions (single vs. multidevice manager, in-band vs. out-of-band, on-premises vs. cloud with Cisco Security Cloud Control)

24 questions · 5 pages

2.5 Describe CIS benchmarks for hardening devices such as Cisco Secure Firewall (FTD) and Cisco IOS XE

29 questions · 6 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–30 31–32

2.6 Troubleshoot AAA for device and network access such as TACACS+ and RADIUS

32 questions · 7 pages

2.7 Configure secure network management of perimeter security and infrastructure devices such as SNMPv3, NetConf, RestConf, APIs, secure syslog, and NTP with authentication

20 questions · 4 pages

Questions 1–5 6–10 11–15 16–20

2.8 Implement access control policies, AVC, URL filtering, malware protection, and intrusion prevention using Cisco Secure Firewall (FTD)

18 questions · 4 pages

Questions 1–5 6–10 11–15 16–18

2.9 Configure site-to-site and remote access VPN using Cisco Secure Firewall (FTD) and Cisco Secure Client

14 questions · 3 pages

Questions 1–5 6–10 11–14

2.10 Troubleshoot VPN tunnel establishment on Cisco Secure Firewall (FTD)

21 questions · 5 pages

Questions 1–5 6–10 11–15 16–20 21–21

3.1 Describe security responsibility within common Cloud Shared Responsibility Models

30 questions · 6 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–30

3.2 Select security capabilities, deployment models, cloud security frameworks, and policy management to secure the cloud

29 questions · 6 pages

3.3 Select security solutions for cloud environments (public; private; hybrid; community cloud; NIST 800-145 SaaS, PaaS, and IaaS; and Cloud Access Security Broker)

26 questions · 6 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–30

3.4 Describe network, application, and data security in cloud environments with solutions such as Cisco Multicloud Defense and Cisco Secure Workload

30 questions · 6 pages

3.5 Configure Splunk to ingest cloud logging and monitoring data from other security solutions

24 questions · 5 pages

3.6 Describe application and workload security concepts including eBPF

26 questions · 6 pages

3.7 Describe DevSecOps (Infrastructure as Code security, CI/CD pipeline, container orchestration, and secure software development)

24 questions · 5 pages

Questions 1–5 6–10 11–15 16–20 21–25

4.1 Describe Security Service Edge (SSE) and Secure Access Service Edge (SASE)

25 questions · 5 pages

4.2 Configure Cisco Secure Access Secure Internet Access

27 questions · 6 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–27

4.3 Configure Cisco Secure Access Secure Private Access

26 questions · 6 pages

4.4 Configure data loss prevention and AI guardrails for secure internet access

29 questions · 6 pages

4.5 Interpret Cisco Secure Access Investigate scores and indicators

26 questions · 6 pages

Questions 1–5 6–10 11–15 16–20 21–25

5.1 Describe Endpoint Protection Platforms (EPP) and Endpoint Detection and Response (EDR) solutions

25 questions · 5 pages

5.2 Describe endpoint device management and asset inventory systems such as MDM

24 questions · 5 pages

5.3 Describe endpoint posture assessment solutions to ensure endpoint security

29 questions · 6 pages

Questions 1–5 6–10 11–15 16–20

5.4 Describe endpoint protection and detection security with solutions such as Cisco Secure Client and Cisco Secure Malware Analytics

20 questions · 4 pages

5.5 Configure endpoint antimalware protection using Cisco Secure Endpoint

29 questions · 6 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–30 31–32

5.6 Interpret Cisco Secure Endpoint malware detection events

32 questions · 7 pages

5.7 Configure email security features with Cisco Security Email Threat Defense

29 questions · 6 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–28

6.1 Describe identity management and secure network access concepts such as guest services, profiling, posture assessment, and BYOD

28 questions · 6 pages

6.2 Describe device compliance and application control

15 questions · 3 pages

Questions 1–5 6–10 11–15

6.3 Configure network access control mechanisms such as 802.1X and MAB with Cisco Identity Services Engine

24 questions · 5 pages

Questions 1–5 6–10 11–15 16–20 21–22

6.4 Configure network access with CoA

22 questions · 5 pages

6.5 Explain exfiltration techniques such as DNS tunneling, HTTPS, email, FTP/SSH/SCP/SFTP, ICMP, Messenger, IRC, NTP, and cloud storage

35 questions · 7 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–30 31–35

6.6 Describe network visibility and enforcement using telemetry and native AI/ML capabilities with XDR and SIEM/SOAR platforms such as Splunk and Cisco XDR

31 questions · 7 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–30 31–31

6.7 Describe Cisco Duo in a zero-trust security architecture (Trust Monitor, MFA, Device Trust, health checks, Adaptive Access policies, SSO, and CII)

29 questions · 6 pages