
CCIE Security
Domain 1Objective 7
1.7 Detect and Mitigate Common Types of Attacks CCIE-SECURITY Practice Questions (Page 3)
Part of the 1.0 Perimeter Security and Intrusion Prevention domain, which accounts for 20% of the CCIE-SECURITY exam. Cisco does not publish an official question count, but from its 120-minute exam (~50–80 total, ~10–16 in this domain), expect 1–1 from this objective — we provide 59 practice questions to prepare you well beyond it. (estimate)
59questions here
12free pages
10concepts
20%of the exam
Questions 11–15
- 11
Which botnet disruption technique involves redirecting the botnet's C&C traffic to a server controlled by the defender to gather intelligence?
Select an answer first - 12
Which DDoS attack type exploits the TCP three-way handshake by sending many SYN packets without completing the handshake?
Select an answer first - 13
Which method is used to detect botnet activity by analyzing network traffic for unusual patterns such as periodic beaconing to a known C&C server?
Select an answer first - 14
Which DDoS mitigation technique involves diverting traffic to a specialized facility that filters malicious packets before forwarding clean traffic to the target?
Select an answer first - 15
What is the primary purpose of rate limiting as a DDoS mitigation technique?
Select an answer first
Finished these 5 questions?
Review the revealed explanations, or continue through the curriculum.
Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Cisco. “CCIE-SECURITY” is a trademark of its owner, used for identification only.