Examers.io
ExamsOrganizationsHow it worksPricingHelp & FAQ
Sign inStart free
Cisco logo

CCIE Security

Domain 3Objective 4

3.4 Layer 2 Security Techniques CCIE-SECURITY Practice Questions (Page 2)

Part of the 3.0 Security Infrastructure domain, which accounts for 15% of the CCIE-SECURITY exam. Cisco does not publish an official question count, but from its 120-minute exam (~50–80 total, ~8–12 in this domain), expect 1–1 from this objective — we provide 53 practice questions to prepare you well beyond it. (estimate)

53questions here
11free pages
7concepts
15%of the exam

Questions 6–10

  1. 6foundation · easy

    Which of the following can be used in a VACL to filter traffic?

    Select an answer first
  2. 7foundation · easy

    Which database does Dynamic ARP Inspection (DAI) rely on to validate ARP packets?

    Select an answer first
  3. 8foundation · easy

    What is the primary purpose of IP Device Tracking (IPDT) on a switch?

    Select an answer first
  4. 9foundation · easy

    Which security feature is directly supported by IP Device Tracking (IPDT)?

    Select an answer first
  5. 10foundation · easy

    Which STP security mechanism is used to protect the root bridge from being taken over by an unauthorized switch?

    Select an answer first
Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CCIE-SECURITY

Keep studying — 3.0 Security Infrastructure

Full CCIE-SECURITY curriculum →Every domain, objective & concept — with linked practiceCCIE-SECURITY exam overview →CCIE Security

Other objectives in 3.0 Security Infrastructure

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Cisco. “CCIE-SECURITY” is a trademark of its owner, used for identification only.