CCIE Security
Domain 3Objective 6
3.6 Monitoring Protocols CCIE-SECURITY Practice Questions (Page 8)
Part of the 3.0 Security Infrastructure domain, which accounts for 15% of the CCIE-SECURITY exam. Cisco does not publish an official question count, but from its 120-minute exam (~50–80 total, ~8–12 in this domain), expect 1–1 from this objective — we provide 42 practice questions to prepare you well beyond it. (estimate)
42questions here
9free pages
11concepts
15%of the exam
Questions 36–40
- 36
A network operations team needs to monitor the health of critical routers and switches. They want to use SNMP to poll interface status and receive immediate notifications when a link goes down. The team is concerned about security and wants to ensure that polling and notifications are authenticated and encrypted. Which SNMP version should they implement?
Select an answer first - 37
An administrator is configuring SNMP on a network device to send a notification to the NMS when a specific interface goes down. The NMS is behind a firewall that may drop UDP packets, and the administrator needs to ensure the notification is reliably delivered. Which SNMP operation should be used?
Select an answer first - 38
A security team is setting up a central syslog server to collect logs from all network devices. They need to ensure that logs from different devices are easily distinguishable and that the syslog server can filter logs based on severity. Which syslog message field is most important for the server to filter on severity?
Select an answer first - 39
An organization is deploying a new syslog infrastructure. They want to ensure that log messages are not lost during high traffic periods and that the syslog server can receive logs from multiple devices. The network engineer must configure the devices to send syslog messages to the central server. Which configuration step is essential on each device?
Select an answer first - 40
A network administrator wants to monitor a remote branch office segment for traffic statistics and historical trends without deploying a full probe. They plan to use RMON on the existing switch. Which RMON group should they enable to collect cumulative traffic statistics for the segment?
Select an answer first
Finished these 5 questions?
Review the revealed explanations, or continue through the curriculum.
Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Cisco. “CCIE-SECURITY” is a trademark of its owner, used for identification only.