A network administrator is configuring a router to filter traffic between two internal VLANs. They need to permit only HTTP and HTTPS traffic from the 192.168.1.0/24 subnet to the 192.168.2.0/24 subnet, and deny all other traffic. Which configuration should they apply?

Apply a standard ACL that permits the source subnet and denies all other traffic

Apply an extended ACL on the router interface that permits TCP ports 80 and 443 from the source subnet to the destination subnet, and denies all other traffic

Use a reflexive ACL that permits return traffic

Use a named ACL that permits all TCP traffic and denies UDP

A switch port is configured with port-security and has a maximum of 5 MAC addresses. The network administrator notices that the port is going into errdisable state frequently. They want to automatically recover the port after 5 minutes without manual intervention. Which configuration should they use?

Change the violation mode to protect

Increase the port-security maximum to 10

Configure errdisable recovery for the psecure-violation cause with a timer of 300 seconds

Use the shutdown violation mode and manually re-enable

CCIE Enterprise Infrastructure

Domain 4Objective 2

Network Security CCIE-ENTERPRISE-INFRASTRUCTURE Practice Questions (Page 8)

Part of the Infrastructure Security and Services domain, which accounts for 15% of the CCIE-ENTERPRISE-INFRASTRUCTURE exam. Cisco does not publish an official question count, but from its 120-minute exam (~50–80 total, ~8–12 in this domain), expect 1–2 from this objective — we provide 39 practice questions to prepare you well beyond it. (estimate)

39questions here

8free pages

3concepts

15%of the exam

Questions 36–39

36application · medium
A network administrator is deploying IPv6 in a campus network. They want to prevent rogue RA messages from end-user devices and also prevent DHCPv6 spoofing. Which two features should be enabled on the access switches?
Select an answer first
37application · medium
A network engineer is configuring OSPFv3 on a router that connects to an untrusted network. They want to authenticate OSPFv3 updates to prevent route injection. Which authentication method should they use?
Select an answer first
38application · medium
A network administrator is configuring a router to filter traffic between two internal VLANs. They need to permit only HTTP and HTTPS traffic from the 192.168.1.0/24 subnet to the 192.168.2.0/24 subnet, and deny all other traffic. Which configuration should they apply?
Select an answer first
39application · medium
A switch port is configured with port-security and has a maximum of 5 MAC addresses. The network administrator notices that the port is going into errdisable state frequently. They want to automatically recover the port after 5 minutes without manual intervention. Which configuration should they use?
Select an answer first

Finished these 4 questions?

Review the revealed explanations, or continue through the curriculum.

No more pagesBack to CCIE-ENTERPRISE-INFRASTRUCTURE

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Cisco. “CCIE-ENTERPRISE-INFRASTRUCTURE” is a trademark of its owner, used for identification only.

Network Security CCIE-ENTERPRISE-INFRASTRUCTURE Practice Questions (Page 8)

Questions 36–39

A network administrator is deploying IPv6 in a campus network. They want to prevent rogue RA messages from end-user devices and also prevent DHCPv6 spoofing. Which two features should be enabled on the access switches?

A network engineer is configuring OSPFv3 on a router that connects to an untrusted network. They want to authenticate OSPFv3 updates to prevent route injection. Which authentication method should they use?

A network administrator is configuring a router to filter traffic between two internal VLANs. They need to permit only HTTP and HTTPS traffic from the 192.168.1.0/24 subnet to the 192.168.2.0/24 subnet, and deny all other traffic. Which configuration should they apply?

Keep studying — Infrastructure Security and Services