What is the primary purpose of the ISO 27001 standard?

To specify technical requirements for cryptographic algorithms used in secure communications

To provide a checklist for conducting penetration testing

To define a set of mandatory security products that organizations must purchase

To provide a framework for establishing, implementing, maintaining, and continually improving an information security management system (ISMS)

Where should ingress filtering be implemented to be most effective?

At the network edge, such as on routers or firewalls

What is the purpose of egress filtering as described in RFC 2827?

To ensure that outgoing packets have valid source addresses belonging to the network

To encrypt all outgoing traffic

To prevent internal users from accessing external websites

Which of the following is a best practice recommended by RFC 2827 in addition to ingress filtering?

Implementing egress filtering on all network boundaries

Allowing all traffic to pass through to avoid latency

What is the primary objective of PCI-DSS?

To provide a framework for IT service management

To protect cardholder data and reduce credit card fraud

To standardize credit card interest rates

CCIE Security

Domain 3Objective 7

3.7 Security Features to Comply with Organizational Security Policies, Procedures, and Standards BCP 38 CCIE-SECURITY Practice Questions (Page 1)

Part of the 3.0 Security Infrastructure domain, which accounts for 15% of the CCIE-SECURITY exam. Cisco does not publish an official question count, but from its 120-minute exam (~50–80 total, ~8–12 in this domain), expect 1–1 from this objective — we provide 34 practice questions to prepare you well beyond it. (estimate)

34questions here

7free pages

9concepts

15%of the exam

Questions 1–5

1foundation · easy
What is the primary purpose of the ISO 27001 standard?
Select an answer first
2foundation · easy
Where should ingress filtering be implemented to be most effective?
Select an answer first
3foundation · easy
What is the purpose of egress filtering as described in RFC 2827?
Select an answer first
4foundation · easy
Which of the following is a best practice recommended by RFC 2827 in addition to ingress filtering?
Select an answer first
5foundation · easy
What is the primary objective of PCI-DSS?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CCIE-SECURITY

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Cisco. “CCIE-SECURITY” is a trademark of its owner, used for identification only.