{"id":851,"date":"2022-05-27T14:47:39","date_gmt":"2022-05-27T09:17:39","guid":{"rendered":"https:\/\/cloudwithease.com\/?post_type=product&p=851"},"modified":"2022-06-20T13:13:56","modified_gmt":"2022-06-20T07:43:56","slug":"ccnp-security","status":"publish","type":"product","link":"https:\/\/cloudwithease.com\/product\/ccnp-security\/","title":{"rendered":"CCNP SECURITY"},"content":{"rendered":"

CCNP Security Interview Q&A Vol 1.0<\/strong><\/h4>\n

Questions 50<\/h4>\n

Check the complete list of questions:<\/h4>\n
    \n
  1. What is VPN?<\/li>\n
  2. Which functions can be performed with the \u201cpacket-tracer\u201d command in ASA?<\/li>\n
  3. What does Cisco ISE stands for?<\/li>\n
  4. When configuring policy-based NAT, which type of access control list should be configured to match both the source and destination IP addresses?<\/li>\n
  5. Which command encrypts all the password on a Cisco device?<\/li>\n
  6. What are the pre-requisites for configuring IP SSH version 2 on a Cisco device?<\/li>\n
  7. What is DMZ?<\/li>\n
  8. Describe the functionality of product Cisco ISE?<\/li>\n
  9. What are the three Violation Actions?<\/li>\n
  10. What are the two modes in which Cisco ASA can be configured?<\/li>\n
  11. Which command is the first that you enter to check whether or not ASDM is installed on the ASA?<\/li>\n
  12. Which two features does Cisco Security Manager provide?<\/li>\n
  13. Your company is replacing a high-availability pair of Cisco ASA 5550 firewalls with the newer Cisco ASA 5555X models. Due to budget constraints, one Cisco ASA 5550 will be replaced at a time. Can 5550 and 5555x firewall be setup in failover mode?<\/li>\n
  14. Which kind of Layer 2 attack targets the STP root bridge election process and allows an attacker to control the flow of traffic?<\/li>\n
  15. A switch is being configured at a new location that uses statically assigned IP addresses. Which will feature ensure that ARP inspection works as expected?<\/li>\n
  16. At which level does firewall severity level will debugs appear on a Cisco ASA?<\/li>\n
  17. A network printer has a DHCP server service that cannot be disabled. How can a layer 2 switch be configured to prevent the printer from causing network issues?<\/li>\n
  18. You have installed a web server on a private network. Which type of NAT must you implement to enable access to the web server for public Internet users?<\/li>\n
  19. What happens when violation mode is set to Shutdown?<\/li>\n
  20. Which ISE feature is used to facilitate a BY0D deployment?<\/li>\n
  21. Which RADIUS attribute is used primarily to differentiate an IEEE 802.1x request from a Cisco MAB request?<\/li>\n
  22. After an endpoint has completed authentication with MAB, a security violation is triggered because a different MAC address was is detected. Which host mode must be active on the port?<\/li>\n
  23. Which CLI command is used to register a Cisco FirePOWER sensor to Firepower Management Center?<\/li>\n
  24. What is penetration attack?<\/li>\n
  25. What are stateful inspection firewalls?<\/li>\n
  26. What is Site-to-Site VPN?<\/li>\n
  27. What is Remote-Access VPN?<\/li>\n
  28. What is Signature Based Detection?<\/li>\n
  29. Which Switchport security violation occurs if it comes to MAC address?<\/li>\n
  30. What is Half Open TCP Connection?<\/li>\n
  31. Which VPN would be established in below mentioned diagram?<\/li>\n
  32. What happens when violation mode is set to protect?<\/li>\n
  33. What is EtherType ACL?<\/li>\n
  34. What are Time-based ACLs?<\/li>\n
  35. What are the two different type of time restrictions in time-based ACLs?<\/li>\n
  36. Which NAT\/PAT type example is implemented in below diagram?<\/li>\n
  37. What NAT\/PAT type example is implemented in below diagram?<\/li>\n
  38. Explain Anomaly-based Intrusion Detection System?<\/li>\n
  39. Which devices can be managed by Cisco Security Manager?<\/li>\n
  40. What are the two modes in which Cisco ASA Firewall can be configured?<\/li>\n
  41. In what scenario would you configure twice NAT?<\/li>\n
  42. Which command can you use to verify access-list implemented on all interfaces in Cisco ASA?<\/li>\n
  43. What can be configured to mitigate ARP poisoning attacks?<\/li>\n
  44. The Cisco ASA 5500-X Series Next-Generation Firewalls provide four main remote access protocols to access the adaptive security appliance management functions. Name them?<\/li>\n
  45. What does AAA stands for?<\/li>\n
  46. Define the usage and purpose of AAA?<\/li>\n
  47. What are Security Contexts in ASA?<\/li>\n
  48. What is the System Execution Space in ASA when it comes to multiple contexts?<\/li>\n
  49. Which command enables the multiple-context mode on the Cisco ASA?<\/li>\n
  50. What is the difference between Site-to-Site VPN and Remote-Access VPN?<\/li>\n<\/ol>\n

     <\/p>