CCIE Security
Domain 1Objective 5
1.5 Cisco NGIPS Deployment Modes CCIE-SECURITY Practice Questions (Page 6)
Part of the 1.0 Perimeter Security and Intrusion Prevention domain, which accounts for 20% of the CCIE-SECURITY exam. Cisco does not publish an official question count, but from its 120-minute exam (~50–80 total, ~10–16 in this domain), expect 1–1 from this objective — we provide 33 practice questions to prepare you well beyond it. (estimate)
33questions here
7free pages
3concepts
20%of the exam
Questions 26–30
- 26
A security engineer is asked to recommend a deployment mode for a Cisco NGIPS in a hospital network. The hospital requires that patient monitoring devices are never disconnected, but they also want to block ransomware. The engineer proposes an in-line deployment with fail-open. However, the hospital's compliance officer is concerned that fail-open might allow malicious traffic during an NGIPS failure. What is the best way to address this concern?
Select an answer first - 27
A managed security service provider (MSSP) monitors multiple customer networks using a Cisco NGIPS. For one customer, they need to see all traffic on a critical link, but the customer's switch does not support SPAN. The MSSP wants to minimize any chance of missing traffic. What should they recommend?
Select an answer first - 28
A hospital network must ensure that patient monitoring devices are not disrupted by any security appliance failure. They want to deploy a Cisco NGIPS to block known malicious traffic, but they cannot afford any downtime. Which deployment mode and configuration best meets these requirements?
Select an answer first - 29
A retail company wants to analyze network traffic for signs of data exfiltration without introducing any latency to their e-commerce transactions. They have a Cisco NGIPS and a switch that supports SPAN. They are concerned about the load on the switch. What is the most appropriate deployment?
Select an answer first - 30
A government agency requires a monitoring solution that can capture 100% of traffic on a 10 Gbps link for forensic analysis. They have a Cisco NGIPS with multiple 10 Gbps interfaces. The switch does not support SPAN on that link. What should they deploy?
Select an answer first
Finished these 5 questions?
Review the revealed explanations, or continue through the curriculum.
Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Cisco. “CCIE-SECURITY” is a trademark of its owner, used for identification only.