Which SSL decryption method involves the firewall acting as a proxy and presenting a generated certificate to the client?

Man-in-the-middle (MITM) decryption

What is a key characteristic of passive SSL inspection?

It decrypts traffic by acting as a proxy

It does not intercept or modify the SSL handshake

It can block malicious traffic in real-time

It requires installing a CA certificate on clients

In an SSL inspection policy, what action is typically taken after traffic is decrypted and inspected?

The traffic is logged and then discarded

The traffic is sent in plaintext to the destination

The traffic is re-encrypted and forwarded to its destination

The traffic is dropped permanently

Which component is essential for a Cisco NGFW to perform SSL inspection on outbound HTTPS traffic?

A trusted CA certificate installed on the firewall

A valid public certificate for each destination

A RADIUS server for authentication

What is the purpose of a trusted CA list in SSL inspection?

To store the firewall's own certificate

To list all certificates that have been revoked

To determine which certificates the firewall should trust and decrypt

To specify which CAs the firewall should use to generate certificates

CCIE Security

Domain 1Objective 6

1.6 Cisco NGFW Features CCIE-SECURITY Practice Questions (Page 4)

Part of the 1.0 Perimeter Security and Intrusion Prevention domain, which accounts for 20% of the CCIE-SECURITY exam. Cisco does not publish an official question count, but from its 120-minute exam (~50–80 total, ~10–16 in this domain), expect 1–1 from this objective — we provide 58 practice questions to prepare you well beyond it. (estimate)

58questions here

12free pages

11concepts

20%of the exam

Questions 16–20

16foundation · easy
Which SSL decryption method involves the firewall acting as a proxy and presenting a generated certificate to the client?
Select an answer first
17foundation · easy
What is a key characteristic of passive SSL inspection?
Select an answer first
18foundation · easy
In an SSL inspection policy, what action is typically taken after traffic is decrypted and inspected?
Select an answer first
19foundation · easy
Which component is essential for a Cisco NGFW to perform SSL inspection on outbound HTTPS traffic?
Select an answer first
20foundation · easy
What is the purpose of a trusted CA list in SSL inspection?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CCIE-SECURITY

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Cisco. “CCIE-SECURITY” is a trademark of its owner, used for identification only.