CCIE Security
Domain 5Objective 2
5.2 Detect, Analyze, and Mitigate Malware Incidents CCIE-SECURITY Practice Questions (Page 3)
Part of the 5.0 Advanced Threat Protection and Content Security domain, which accounts for 20% of the CCIE-SECURITY exam. Cisco does not publish an official question count, but from its 120-minute exam (~50–80 total, ~10–16 in this domain), expect 1–2 from this objective — we provide 54 practice questions to prepare you well beyond it. (estimate)
54questions here
11free pages
8concepts
20%of the exam
Questions 11–15
- 11
Which malware analysis method involves running the malware in a controlled environment to observe its behavior, such as network traffic, file system changes, and registry modifications?
Select an answer first - 12
What is the first step in the malware incident response process after a malware infection is detected?
Select an answer first - 13
Which phase of the malware incident response process involves isolating affected systems to prevent the malware from spreading further?
Select an answer first - 14
Which mitigation strategy helps limit the lateral movement of malware by dividing the network into isolated zones with controlled communication paths?
Select an answer first - 15
Which mitigation strategy involves deploying antivirus, EDR, and other security software on individual devices to detect and block malware?
Select an answer first
Finished these 5 questions?
Review the revealed explanations, or continue through the curriculum.
Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Cisco. “CCIE-SECURITY” is a trademark of its owner, used for identification only.