You are troubleshooting an OSPF adjacency issue between two Cisco IOS routers. The adjacency is not forming, and you suspect authentication mismatch. Which command would you use to verify the OSPF authentication configuration on the interface?

show running-config | include ospf

Your BGP router is receiving routes from an eBGP peer that are not in your expected prefix range. You suspect a route injection attack. Which two measures would best mitigate this?

Use a route-map to set a lower local preference on all inbound routes.

Enable BGP route dampening and set a high penalty.

Configure a passive interface on the BGP peer interface.

Apply a prefix-list to filter inbound routes and enable BGP TTL security.

You are configuring a Cisco ASA with multiple VRFs. One VRF runs OSPF with a partner network. The partner requires OSPF authentication and route filtering to ensure only specific subnets are exchanged. How should you configure this on the ASA?

Configure OSPF authentication within the VRF's OSPF process and apply a distribute-list for route filtering.

Use a route-map to set the metric on routes and rely on the partner to filter.

Place the partner-facing interface in a passive state.

Enable OSPF TTL security on the partner-facing interface.

CCIE Security

Domain 1Objective 10

1.10 Routing Protocols Security on Cisco IOS, Cisco ASA, and Cisco FTD CCIE-SECURITY Practice Questions (Page 12)

Part of the 1.0 Perimeter Security and Intrusion Prevention domain, which accounts for 20% of the CCIE-SECURITY exam. Cisco does not publish an official question count, but from its 120-minute exam (~50–80 total, ~10–16 in this domain), expect 1–1 from this objective — we provide 58 practice questions to prepare you well beyond it. (estimate)

58questions here

12free pages

10concepts

20%of the exam

Questions 56–58

56application · easy
You are troubleshooting an OSPF adjacency issue between two Cisco IOS routers. The adjacency is not forming, and you suspect authentication mismatch. Which command would you use to verify the OSPF authentication configuration on the interface?
Select an answer first
57application · medium
Your BGP router is receiving routes from an eBGP peer that are not in your expected prefix range. You suspect a route injection attack. Which two measures would best mitigate this?
Select an answer first
58application · medium
You are configuring a Cisco ASA with multiple VRFs. One VRF runs OSPF with a partner network. The partner requires OSPF authentication and route filtering to ensure only specific subnets are exchanged. How should you configure this on the ASA?
Select an answer first

Finished these 3 questions?

Review the revealed explanations, or continue through the curriculum.

No more pagesBack to CCIE-SECURITY

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Cisco. “CCIE-SECURITY” is a trademark of its owner, used for identification only.

1.10 Routing Protocols Security on Cisco IOS, Cisco ASA, and Cisco FTD CCIE-SECURITY Practice Questions (Page 12)

Questions 56–58

You are troubleshooting an OSPF adjacency issue between two Cisco IOS routers. The adjacency is not forming, and you suspect authentication mismatch. Which command would you use to verify the OSPF authentication configuration on the interface?

Your BGP router is receiving routes from an eBGP peer that are not in your expected prefix range. You suspect a route injection attack. Which two measures would best mitigate this?

You are configuring a Cisco ASA with multiple VRFs. One VRF runs OSPF with a partner network. The partner requires OSPF authentication and route filtering to ensure only specific subnets are exchanged. How should you configure this on the ASA?

Keep studying — 1.0 Perimeter Security and Intrusion Prevention