CISCO

CCIE Security

CCIE-SECURITY

The CCIE Security certification validates expert-level skills in planning, designing, deploying, operating, and optimizing complex enterprise security networks. It is for experienced security professionals aiming to become technical leaders, demonstrating mastery of context-aware policy enforcement, centralized orchestration, cloud-delivered security, and automation. Earning this credential signals you are among the best in the field, ready to lead security initiatives and drive business outcomes.

Practice Free Questions

5Domains

56Objectives

494Practice pages

2372Free questions

CCIE-SECURITY free practice questions

Choose any objective and open any question page — no sign-in required.

1.1 Deployment modes on Cisco ASA and Cisco FTD

53 questions · 11 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–30 31–35 36–40 41–45 46–50 51–53

1.2 Firewall features on Cisco ASA and FTD

44 questions · 9 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–30 31–35 36–40 41–44

1.3 Security features on Cisco IOS/IOS XE

42 questions · 9 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–30 31–35 36–40 41–42

1.4 Cisco FMC features

59 questions · 12 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–30 31–35 36–40 41–45 46–50 51–55 56–59

1.5 Cisco NGIPS deployment modes

33 questions · 7 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–30 31–33

1.6 Cisco NGFW features

58 questions · 12 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–30 31–35 36–40 41–45 46–50 51–55 56–58

1.7 Detect and mitigate common types of attacks

59 questions · 12 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–30 31–35 36–40 41–45 46–50 51–55 56–59

1.8 Clustering and high availability features on Cisco ASA and Cisco FTD

38 questions · 8 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–30 31–35 36–38

1.9 Policies and rules for traffic control on Cisco ASA and Cisco FTD

21 questions · 5 pages

Questions 1–5 6–10 11–15 16–20 21–21

1.10 Routing protocols security on Cisco IOS, Cisco ASA, and Cisco FTD

58 questions · 12 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–30 31–35 36–40 41–45 46–50 51–55 56–58

1.11 Network connectivity through Cisco ASA and Cisco FTD

50 questions · 10 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–30 31–35 36–40 41–45 46–50

1.12 Correlation and remediation rules on Cisco FMC

38 questions · 8 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–30 31–35 36–38

2.1 Cisco AnyConnect client-based, remote-access VPN technologies on Cisco ASA, Cisco FTD, and Cisco routers

38 questions · 8 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–30 31–35 36–38

2.2 Cisco IOS CA for VPN authentication

49 questions · 10 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–30 31–35 36–40 41–45 46–49

2.3 FlexVPN, DMVPN, and IPsec L2L tunnels

37 questions · 8 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–30 31–35 36–37

2.4 VPN high availability methods

54 questions · 11 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–30 31–35 36–40 41–45 46–50 51–54

2.5 Infrastructure segmentation methods

16 questions · 4 pages

Questions 1–5 6–10 11–15 16–16

2.6 Microsegmentation with Cisco TrustSec using SFT and SXP

56 questions · 12 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–30 31–35 36–40 41–45 46–50 51–55 56–56

3.1 Device hardening techniques and control plane protection methods

36 questions · 8 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–30 31–35 36–36

3.2 Management plane protection techniques

16 questions · 4 pages

Questions 1–5 6–10 11–15 16–16

3.3 Data plane protection techniques

38 questions · 8 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–30 31–35 36–38

3.4 Layer 2 security techniques

53 questions · 11 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–30 31–35 36–40 41–45 46–50 51–53

3.5 Wireless security technologies

39 questions · 8 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–30 31–35 36–39

3.6 Monitoring protocols

42 questions · 9 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–30 31–35 36–40 41–42

3.7 Security features to comply with organizational security policies, procedures, and standards BCP 38

34 questions · 7 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–30 31–34

3.8 Cisco SAFE model to validate network security design and to identify threats to different PINs

50 questions · 10 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–30 31–35 36–40 41–45 46–50

3.9 Interaction with network devices through APIs using basic Python scripts

61 questions · 13 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–30 31–35 36–40 41–45 46–50 51–55 56–60 61–61

3.10 Cisco DNAC Northbound APIs use cases

30 questions · 6 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–30

4.1 Cisco ISE scalability using multiple nodes and personas

52 questions · 11 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–30 31–35 36–40 41–45 46–50 51–52

4.2 Cisco switches and Cisco Wireless LAN Controllers for network access AAA with Cisco ISE

37 questions · 8 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–30 31–35 36–37

4.3 Cisco devices for administrative access with Cisco ISE

53 questions · 11 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–30 31–35 36–40 41–45 46–50 51–53

4.4 AAA for network access with 802.1X and MAB using Cisco ISE

60 questions · 12 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–30 31–35 36–40 41–45 46–50 51–55 56–60

4.5 Guest lifecycle management using Cisco ISE and Cisco WLC

30 questions · 6 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–30

4.6 BYOD on-boarding and network access flows

48 questions · 10 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–30 31–35 36–40 41–45 46–48

4.7 Cisco ISE integration with external identity sources

59 questions · 12 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–30 31–35 36–40 41–45 46–50 51–55 56–59

4.8 Provisioning Cisco AnyConnect with Cisco ISE and Cisco ASA

26 questions · 6 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–26

4.9 Posture assessment with Cisco ISE

54 questions · 11 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–30 31–35 36–40 41–45 46–50 51–54

4.10 Endpoint profiling using Cisco ISE and Cisco network infrastructure including device sensor

16 questions · 4 pages

Questions 1–5 6–10 11–15 16–16

4.11 Integration of MDM with Cisco ISE

30 questions · 6 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–30

4.12 Certification-based authentication using Cisco ISE

46 questions · 10 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–30 31–35 36–40 41–45 46–46

4.13 Authentication methods

44 questions · 9 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–30 31–35 36–40 41–44

4.14 Identity mapping on Cisco ASA, Cisco ISE, Cisco WSA, and Cisco FTD

49 questions · 10 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–30 31–35 36–40 41–45 46–49

4.15 pxGrid integration between security devices Cisco WSA, Cisco ISE, and Cisco FMC

50 questions · 10 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–30 31–35 36–40 41–45 46–50

4.16 Integration of Cisco ISE with multifactor authentication

28 questions · 6 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–28

4.17 Access control and single sign-on using Cisco DUO security technology

29 questions · 6 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–29

4.18 Cisco IBNS 2.0 (C3PL) for authentication, access control, and user policy enforcement

49 questions · 10 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–30 31–35 36–40 41–45 46–49

5.1 Cisco AMP for networks, Cisco AMP for endpoints, and Cisco AMP for content security (Cisco ESA, and Cisco WSA)

59 questions · 12 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–30 31–35 36–40 41–45 46–50 51–55 56–59

5.2 Detect, analyze, and mitigate malware incidents

54 questions · 11 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–30 31–35 36–40 41–45 46–50 51–54

5.3 Perform packet capture and analysis using Wireshark, tcpdump, SPAN, ERSPAN, and RSPAN

32 questions · 7 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–30 31–32

5.4 Cloud security

60 questions · 12 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–30 31–35 36–40 41–45 46–50 51–55 56–60

5.5 Web filtering, user identification, and Application Visibility and Control (AVC) on Cisco FTD and Cisco WSA

36 questions · 8 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–30 31–35 36–36

5.6 WCCP redirection on Cisco devices

35 questions · 7 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–30 31–35

5.7 Email security features

30 questions · 6 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–30

5.8 HTTP decryption and inspection on Cisco FTD, Cisco WSA, and Cisco Umbrella

49 questions · 10 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–30 31–35 36–40 41–45 46–49

5.9 Cisco SMA for centralized content security management

35 questions · 7 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–30 31–35

5.10 Cisco advanced threat solutions and their integration: Cisco Stealthwatch, Cisco FMC, Cisco AMP, Cisco CTA, Threat Grid, ETA, Cisco WSA, Cisco SMA, Cisco Threat Response, and Cisco Umbrella

20 questions · 4 pages

Questions 1–5 6–10 11–15 16–20

Want a smarter study session?Try adaptive questions aimed at your weak spots, the illustrated book, and readiness you can trust.

Continue Free Practice

Percentages reflect share of the current practice bank, not official exam weightings. Every page above is a live, crawlable practice page (56 objectives · 494 pages).

CCIE Security

CCIE-SECURITY free practice questions

Domain 1 · 1.0 Perimeter Security and Intrusion Prevention23% of practice bank · 12 objectives · 553 questions23%

Domain 2 · 2.0 Secure Connectivity and Segmentation11% of practice bank · 6 objectives · 250 questions11%

Domain 3 · 3.0 Security Infrastructure17% of practice bank · 10 objectives · 399 questions17%

Domain 4 · 4.0 Identity Management, Information Exchange, and Access Control32% of practice bank · 18 objectives · 760 questions32%

Domain 5 · 5.0 Advanced Threat Protection and Content Security17% of practice bank · 10 objectives · 410 questions17%