IT Exam Items Repository

Last Updated: Jun 24, 2026
IT Exam Items Repository › Category: CCNA Security
What are two main capabilities of a NAC system? (Choose two.)
ITExamAnswers Editorial Team asked 5 years ago • 
Which device is used as the authentication server in an 802.1X implementation?
ITExamAnswers Editorial Team asked 5 years ago • 
A switch has the following command issued as part of an 802.1X deployment. address ipv4 10.1.1.50 auth-port 1812 acct-port 1813 What is the purpose of this command?
ITExamAnswers Editorial Team asked 5 years ago • 
What is the source for IPS rule updates when using a Cisco intrusion prevention service?
ITExamAnswers Editorial Team asked 5 years ago • 
Which rule action will cause Snort IPS to block a packet without logging it?
ITExamAnswers Editorial Team asked 5 years ago • 
Which device is a dedicated inline threat prevention appliance that is effective against both known and unknown threats?
ITExamAnswers Editorial Team asked 5 years ago • 
What are three actions that can be performed by Snort in IDS mode? (Choose three.)
ITExamAnswers Editorial Team asked 5 years ago • 
Which statement correctly describes the configuration of a Snort VPG interface?
ITExamAnswers Editorial Team asked 5 years ago • 
Which intrusion prevention service was available on first-generation ISR routers and is no longer supported by Cisco?
ITExamAnswers Editorial Team asked 5 years ago • 
What is a characteristic of the Snort subscriber rule set term-based subscription?
ITExamAnswers Editorial Team asked 5 years ago • 
Which type of alert is generated when an IPS incorrectly identifies normal network user traffic as attack traffic?
ITExamAnswers Editorial Team asked 5 years ago • 
What term describes a set of rules used by an IDS or IPS to detect typical intrusion activity?
ITExamAnswers Editorial Team asked 5 years ago • 
Which IPS signature trigger category uses the simplest triggering mechanism and searches for a specific and pre-defined atomic or composite pattern?
ITExamAnswers Editorial Team asked 5 years ago • 
When a Cisco IOS Zone-Based Policy Firewall is being configured via CLI, which step must be taken after zones have been created?
ITExamAnswers Editorial Team asked 5 years ago • 
A company is deploying a new network design in which the border router has three interfaces. Interface Serial0/0/0 connects to the ISP, GigabitEthernet0/0 connects to the DMZ, and GigabitEthernet/01 connects to the internal private network. Which type of traffic would receive the least amount of inspection (have the most freedom of travel)?
ITExamAnswers Editorial Team asked 5 years ago • 
« Previous1…3940414243…65Next »
Ask Question

About The Author

ITExam Editorial Team

The ITExamAnswers Editorial Team is a dedicated group of certified IT professionals and network engineers. We rigorously review, verify, and update all exam materials to ensure you receive the most accurate and reliable resources for your certification journey.