2.6 Microsegmentation with Cisco TrustSec Using SFT and SXP CCIE-SECURITY Practice Questions (Page 2)

Questions 6–10

1. 6foundation · easy

   What happens to SGT bindings when the SXP hold-down timer expires?

   • AThey are refreshed automatically
   • BThey are encrypted
   • CThey are removed from the SXP table
   • DThey are sent to the AAA server
   Reveal Solution Discussion Select an answer first
2. 7foundation · easy

   What is the purpose of SXP filtering?

   • ATo authenticate SXP peers
   • BTo encrypt SXP messages
   • CTo increase the hold-down timer
   • DTo limit which IP-to-SGT bindings are shared with SXP peers
   Reveal Solution Discussion Select an answer first
4. 8foundation · easy

   Which tool is commonly used to implement SXP filtering?

   • AVLAN maps
   • BPrefix lists
   • CRoute maps
   • DAccess control lists (ACLs)
   Reveal Solution Discussion Select an answer first
5. 9foundation · easy

   How does SXP use passwords to enhance security?

   • ATo authenticate SXP peers before establishing a session
   • BTo encrypt the SXP payload
   • CTo select the SXP port number
   • DTo compress SXP messages
   Reveal Solution Discussion Select an answer first
6. 10foundation · easy

   What type of authentication does SXP typically use when a password is configured?

   • ATACACS+ authentication
   • BKerberos authentication
   • CRSA certificate-based authentication
   • DMD5 authentication
   Reveal Solution Discussion Select an answer first