Which of the following is a best practice when implementing iACLs?

Use only extended ACLs with no remarks

Apply the iACL outbound on the management interface

Apply the iACL inbound on all interfaces facing untrusted networks

Place the iACL as close to the destination as possible

Where should an iACL be placed to be most effective?

On the core switch's outbound interface to the server farm

On the management station's interface

On the edge router's inbound interface facing the untrusted network

Which type of traffic is directly managed by Control Plane Policing?

Traffic that is forwarded through the device (transit traffic)

Traffic that is encrypted and needs decryption

Traffic that is destined to the device itself, such as routing protocols and management traffic

Traffic that is broadcast on the local LAN segment

Which configuration step is required to apply a CoPP policy to the control plane?

Apply the policy map to the management interface only

Apply the policy map to all physical interfaces using the 'service-policy' command

Apply the policy map globally using the 'global-service-policy' command

Apply the policy map to the control plane interface using the 'service-policy' command

CCIE Security

Domain 3Objective 1

3.1 Device Hardening Techniques and Control Plane Protection Methods CCIE-SECURITY Practice Questions (Page 2)

Part of the 3.0 Security Infrastructure domain, which accounts for 15% of the CCIE-SECURITY exam. Cisco does not publish an official question count, but from its 120-minute exam (~50–80 total, ~8–12 in this domain), expect 1–1 from this objective — we provide 36 practice questions to prepare you well beyond it. (estimate)

36questions here

8free pages

8concepts

15%of the exam

Questions 6–10

6foundation · easy
Which of the following is a best practice when implementing iACLs?
Select an answer first
7foundation · easy
Where should an iACL be placed to be most effective?
Select an answer first
8foundation · easy
Which command can be used to verify the number of packets matched by an iACL?
Select an answer first
9foundation · easy
Which type of traffic is directly managed by Control Plane Policing?
Select an answer first
10foundation · easy
Which configuration step is required to apply a CoPP policy to the control plane?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CCIE-SECURITY

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Cisco. “CCIE-SECURITY” is a trademark of its owner, used for identification only.