
CCIE Security
Domain 2Objective 2
2.2 Cisco IOS CA for VPN Authentication CCIE-SECURITY Practice Questions (Page 2)
Part of the 2.0 Secure Connectivity and Segmentation domain, which accounts for 20% of the CCIE-SECURITY exam. Cisco does not publish an official question count, but from its 120-minute exam (~50–80 total, ~10–16 in this domain), expect 2–3 from this objective — we provide 49 practice questions to prepare you well beyond it. (estimate)
49questions here
10free pages
6concepts
20%of the exam
Questions 6–10
- 6
Which command is used to enable the Cisco IOS CA server on a router?
Select an answer first - 7
Before enabling the CA server, which two settings must be configured on the Cisco IOS device?
Select an answer first - 8
Which protocol is commonly used for automatic certificate enrollment with a Cisco IOS CA?
Select an answer first - 9
What is the first step a VPN peer must perform before enrolling with a Cisco IOS CA?
Select an answer first - 10
What is the purpose of a Certificate Revocation List (CRL) in a Cisco IOS CA environment?
Select an answer first
Finished these 5 questions?
Review the revealed explanations, or continue through the curriculum.
Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Cisco. “CCIE-SECURITY” is a trademark of its owner, used for identification only.