A manufacturing company wants to deploy an NGIPS to protect its industrial control network. They need to block unauthorized Modbus commands but also want to minimize any potential impact on production traffic. What is the best approach?

Deploy inline with fail-closed mode

Deploy inline with fail-open mode

A service provider needs to monitor traffic on a customer link without introducing any latency. They have a fiber optic link and want to ensure they can see both directions of traffic. What should they use?

Passive NGIPS connected to a SPAN port

SPAN port configured on the provider edge router

A financial services firm must prevent ransomware from reaching endpoints by blocking malicious downloads at the network layer. The security team has a Cisco NGIPS appliance with ample processing capacity. They need to ensure that any detected malware triggers an immediate drop of the connection. Which deployment mode should they choose?

TAP deployment with out-of-band response

In-line deployment with fail-closed configuration

Passive deployment using SPAN port

In-line deployment with fail-open configuration

A cloud service provider wants to protect its customer-facing web servers from application-layer attacks. They have a Cisco NGIPS and need to block malicious requests in real time. They also want to maintain a record of all traffic for incident response. What should they implement?

TAP deployment with out-of-band resets

In-line deployment with logging enabled

In-line deployment with fail-open and no logging

CCIE Security

Domain 1Objective 5

1.5 Cisco NGIPS Deployment Modes CCIE-SECURITY Practice Questions (Page 3)

Part of the 1.0 Perimeter Security and Intrusion Prevention domain, which accounts for 20% of the CCIE-SECURITY exam. Cisco does not publish an official question count, but from its 120-minute exam (~50–80 total, ~10–16 in this domain), expect 1–1 from this objective — we provide 33 practice questions to prepare you well beyond it. (estimate)

33questions here

7free pages

3concepts

20%of the exam

Questions 11–15

11application · medium
A government agency wants to monitor all traffic on a critical link for compliance reporting. They do not need to block any traffic, but they require a complete and accurate record of all packets. The link is a 10 Gbps fiber connection. What should they use?
Select an answer first
12application · medium
A manufacturing company wants to deploy an NGIPS to protect its industrial control network. They need to block unauthorized Modbus commands but also want to minimize any potential impact on production traffic. What is the best approach?
Select an answer first
13application · medium
A service provider needs to monitor traffic on a customer link without introducing any latency. They have a fiber optic link and want to ensure they can see both directions of traffic. What should they use?
Select an answer first
14application · medium
A financial services firm must prevent ransomware from reaching endpoints by blocking malicious downloads at the network layer. The security team has a Cisco NGIPS appliance with ample processing capacity. They need to ensure that any detected malware triggers an immediate drop of the connection. Which deployment mode should they choose?
Select an answer first
15application · medium
A cloud service provider wants to protect its customer-facing web servers from application-layer attacks. They have a Cisco NGIPS and need to block malicious requests in real time. They also want to maintain a record of all traffic for incident response. What should they implement?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CCIE-SECURITY

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Cisco. “CCIE-SECURITY” is a trademark of its owner, used for identification only.

1.5 Cisco NGIPS Deployment Modes CCIE-SECURITY Practice Questions (Page 3)

Questions 11–15

A government agency wants to monitor all traffic on a critical link for compliance reporting. They do not need to block any traffic, but they require a complete and accurate record of all packets. The link is a 10 Gbps fiber connection. What should they use?

A manufacturing company wants to deploy an NGIPS to protect its industrial control network. They need to block unauthorized Modbus commands but also want to minimize any potential impact on production traffic. What is the best approach?

A service provider needs to monitor traffic on a customer link without introducing any latency. They have a fiber optic link and want to ensure they can see both directions of traffic. What should they use?

A cloud service provider wants to protect its customer-facing web servers from application-layer attacks. They have a Cisco NGIPS and need to block malicious requests in real time. They also want to maintain a record of all traffic for incident response. What should they implement?

Keep studying — 1.0 Perimeter Security and Intrusion Prevention