CCIE Security
Domain 1Objective 3
1.3 Security Features on Cisco IOS/IOS XE CCIE-SECURITY Practice Questions (Page 3)
Part of the 1.0 Perimeter Security and Intrusion Prevention domain, which accounts for 20% of the CCIE-SECURITY exam. Cisco does not publish an official question count, but from its 120-minute exam (~50–80 total, ~10–16 in this domain), expect 1–1 from this objective — we provide 42 practice questions to prepare you well beyond it. (estimate)
42questions here
9free pages
11concepts
20%of the exam
Questions 11–15
- 11
In a zone-based firewall with NAT, what is the recommended order of operations for traffic entering a zone?
Select an answer first - 12
Which mechanism does NBAR use to classify traffic that does not use well-known ports?
Select an answer first - 13
When integrating NAT with ZBFW, which zone should be considered the 'inside' zone for NAT purposes?
Select an answer first - 14
Which command is used to verify the current NAT translations on a router?
Select an answer first - 15
If traffic from a zone is being dropped unexpectedly, which command would help verify whether the zone-based firewall policy is the cause?
Select an answer first
Finished these 5 questions?
Review the revealed explanations, or continue through the curriculum.
Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Cisco. “CCIE-SECURITY” is a trademark of its owner, used for identification only.