A manufacturing company wants to block industrial control system (ICS) malware that spreads over the network. They have a Cisco NGIPS and need to ensure that any malicious packet is stopped immediately. However, they also need to maintain visibility into all traffic for compliance. What is the best approach?

Use a TAP only and send traffic to the NGIPS

Deploy the NGIPS in-line and use a TAP for compliance monitoring

Deploy the NGIPS in-line with fail-open and rely on its logs

Deploy the NGIPS passively using SPAN

A law firm wants to monitor for insider threats by analyzing email and web traffic. They are concerned about the performance impact of an in-line appliance on their internet connection. They have a switch that supports SPAN. What should they do?

Deploy the NGIPS in-line with fail-closed

Deploy the NGIPS in-line with fail-open

Configure SPAN to send traffic to the NGIPS

A telecom provider needs to monitor traffic on multiple links between two routers. They have a Cisco NGIPS with multiple monitoring interfaces. The links are aggregated using Link Aggregation Control Protocol (LACP), and the switch does not support SPAN on the bundle. What is the best way to provide traffic to the NGIPS?

Use a SPAN port on one of the physical links

Deploy the NGIPS in-line on each link

Use a network TAP with aggregation

CCIE Security

Domain 1Objective 5

1.5 Cisco NGIPS Deployment Modes CCIE-SECURITY Practice Questions (Page 7)

Part of the 1.0 Perimeter Security and Intrusion Prevention domain, which accounts for 20% of the CCIE-SECURITY exam. Cisco does not publish an official question count, but from its 120-minute exam (~50–80 total, ~10–16 in this domain), expect 1–1 from this objective — we provide 33 practice questions to prepare you well beyond it. (estimate)

33questions here

7free pages

3concepts

20%of the exam

Questions 31–33

31application · medium
A manufacturing company wants to block industrial control system (ICS) malware that spreads over the network. They have a Cisco NGIPS and need to ensure that any malicious packet is stopped immediately. However, they also need to maintain visibility into all traffic for compliance. What is the best approach?
Select an answer first
32application · medium
A law firm wants to monitor for insider threats by analyzing email and web traffic. They are concerned about the performance impact of an in-line appliance on their internet connection. They have a switch that supports SPAN. What should they do?
Select an answer first
33application · medium
A telecom provider needs to monitor traffic on multiple links between two routers. They have a Cisco NGIPS with multiple monitoring interfaces. The links are aggregated using Link Aggregation Control Protocol (LACP), and the switch does not support SPAN on the bundle. What is the best way to provide traffic to the NGIPS?
Select an answer first

Finished these 3 questions?

Review the revealed explanations, or continue through the curriculum.

No more pagesBack to CCIE-SECURITY

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Cisco. “CCIE-SECURITY” is a trademark of its owner, used for identification only.

1.5 Cisco NGIPS Deployment Modes CCIE-SECURITY Practice Questions (Page 7)

Questions 31–33

A law firm wants to monitor for insider threats by analyzing email and web traffic. They are concerned about the performance impact of an in-line appliance on their internet connection. They have a switch that supports SPAN. What should they do?

Keep studying — 1.0 Perimeter Security and Intrusion Prevention