CCNA Security Practice Exam

ACLs, RFCs, And More!

To help you prepare for success on the CCNA Security exam, here's a practice exam on security topics from Autosecure to ACLs!

To avoid peeking, all answers are at the bottom of the page.

When you're done here, visit our CCNA Practice Exam page for more!

Chris Bryant

CCIE #12999

"The Computer Certification Bulldog"

chris@thebryantadvantage.com

Question 1:

If you're using an extended ACL to block traffic to a server located on the remote side of your WAN, where should you place the ACL?

A. Remote side of the WAN

B. As close to the source as possible

C. On the local side of the WAN

D. As close to the destination as possible

Question 2:

The RFC 3704 process is commonly used to protect a network against IP Spoofing. How so?

A. Allow for stronger encryption than MD5

B. Filter packets with certain source addresses

C. Prevent a token from being used a second time

D. Allow for the use of one-time-only passwords

Question 3:

Which of the following should be done to improve overall network security when SNMP is in use?

A. Use V3 to allow encryption

B. Community strings should have the RO attribute

C. V3 should be avoided due to known security vulnerabilities

D. None of the above

 

 

Question 4:

Which of the following is enabled when RSA keys are generated?

A. the password encryptions service

B. Telnet access with the password "password"

C. SSL

D. SSH

Question 5:

In a brute force attack, on average approximately what percentage of the possible keys will an attacker have to go through before finding the right one?

Question 6:

What command allows a router's clock to adjust automatically to daylight savings time?

A. ntp master daylight dynamic

B. clock daylight dynamic

C. clock summer-time

D. ntp dst

 

Question 7:

By default, what users can still log in during a router's quiet time when the IOS Login Enhancements are running?

A. Supervisors (as defined in the Views)

B. Users connecting via the Console port

C. Users with privilege level 15

D. None

Answers at the bottom of the page!

 

I'm Paying It Forward Bigger Than Ever.

My Famous CCNA Study Package Is Now $25.