1.6 Cisco NGFW Features CCIE-SECURITY Practice Questions (Page 1)

Questions 1–5

1. 1foundation · easy

   What is the primary purpose of SSL inspection on a Cisco NGFW?

   • ATo encrypt all outbound traffic to protect user privacy
   • BTo decrypt encrypted traffic so security policies can inspect it for threats
   • CTo block all SSL/TLS traffic by default
   • DTo accelerate SSL handshakes for better performance
   Reveal Solution Discussion Select an answer first
2. 2foundation · easy

   Which protocol is commonly used to obtain user identity information from a network access server?

   • ARADIUS
   • BHTTP
   • CBGP
   • DOSPF
   Reveal Solution Discussion Select an answer first
4. 3foundation · easy

   In a user identity policy, what is the primary basis for allowing or blocking traffic?

   • ASource IP address only
   • BUser or group membership
   • CTime of day
   • DDestination port
   Reveal Solution Discussion Select an answer first
5. 4foundation · easy

   What is a prerequisite for enforcing user identity policies on a Cisco NGFW?

   • AThe user must have a static IP address
   • BThe firewall must have a geolocation database
   • CThe traffic must be encrypted
   • DThe user must be authenticated
   Reveal Solution Discussion Select an answer first
6. 5foundation · easy

   What does the geolocation database on a Cisco NGFW provide?

   • AA mapping of domain names to IP addresses
   • BA list of malicious IP addresses
   • CA mapping of IP addresses to physical locations
   • DA list of users and their locations
   Reveal Solution Discussion Select an answer first