3. Cisco Best Practice – BOOT, TFTP, DNS
Data Fidelity Technology – File Reputation
9. EAP Method – EAP-FAST
11. Data Plane – ACL, Anti-Spoofing, DHCP
14. Sensor Mode Attacker - IPS
15. SDEE Message - Error, All
15. Reflexive ACL – UDP, Ext IP, TCP
22. TACACS differ RADIUS – TCP, Sent NAS, Per-Command
24. Lab Group Policy – Default Radius Group
25. Lab ASA VPN – Clientless SSL VPN, Default Web VPN
26. Lab DfltGrpPolicy – ABCD
28. CIA Tried – Modify Data
33. IPSec VPN – Security Associate, Mutual
38. IKE use NAT – UDP 4500
39. IPSec Transport - Between Stations, Unicast, Payload
41. IPSec VPN - isakmp sa
43. Stuxnet Virus – Cyber warfare
49. FirePower preprocessor SYN – Rate-based Prevention
50. VPN Feature – Hairpinning
52. Cisco ACS – Scalability
62. Local LAN/WAN – Split Tunneling
67. PVLAN Isolated Port – Promiscous Port
70. Attacker Virtually change - MAC Spoofing
71. Next Generation Encryption – AES, SHA-384
74. CoPP and CPPr – QoS, Traffic Classification
80. Host based IPS – Encrypted File, Restrictive Policy, Alert
83. Session Management - Route Lookup, NAT, ACL
85. Cisco Hast Type – Md5
88. Cisco IPS manager – SDEE
90. HMAC use Authenticity – hash, key
92. Radius support Cisco ASA – PAP, MS-CHAPv1, MS-CHAPv2
97. Attack VLAN Hopping – Switch Spoofing, Double Tagging
100. FirePOWER impact flag – Severity of an attack
104. SMTP processor FirePOWER – Extranet & Decode email
113. IPS type - Anomaly Based
114. Threat is the victim – Phishing
115. Web Based Attacker - Web Security Appliance
116. Function of PVLAN – L2 Broadcast Domain
117. Spoofing Attack – Unicast reserve
118. CDP version 1 attack – DoS
119. Mitigate CAM Overflow – Dynamic Port Security
121. ARP Spoofing Attack – DHCP Spoofing, Dynamic ARP
123. Attacker target Network – Reconnaissance
124. Security Control defense – Treat mitigation
125. Cisco Configuration Enable AAA – AAA Summary
126. SEIM Software – Altering Administer, Syslog Data
127. ASA handle the Packet – First matching class map
128. Definition of Malware – Unwanted Software
129. Deny Attacker inline – IPS
131. FirePOWER SYN Attack – Rate-Based prevention
133. Encrypted Technology – Software
134. Cisco Email Security – Contextual
135. Sourcefire secure – Allow with inspection
137. Wipe command ISE - Manage Corporate data
138. Digital Certificate – Central CA Server
139. False Negative IPS – Penetration Testing
140. Stateless Firewall – 5 Tuple, Track Connection
142. PVLAN Allow VLAN – Community host
152. IPS Modes Maximum – Inline
153.
154. Feature Filter CoPP – Access Control List
157. Attacker send mail – Phishing
160. malicious CEO – Target malware, Advance threat
163. EAP-FASTv2 over EAP-FAST – Single EAP exchange
164. IOS privilege – below it
165. Asymmetric Cryptography – Public, Private
170. Device management task – SSH, SNMPv3
172. Radius diff TACACS - fewer pkt, authentication pkt, UDP
173. A data breath – Confidentiality
175. Primary purposed IPS – Signature is Triggered
176. PEAP – EAP – Encrypts exchange
179. Proxy Firewall – Cross-site scripting
180. DHCP spoofing – Modify, Man-In-Middle, Network G/W
184. Block Malicious traffic – Allow with inspection
186. Dynamic PAT – Round Robin
187. CEO Email Msg – Advance Threat, Targeted Malware
189. HTTP-GET – TCP, ACL, NAT
191. Well known Security - Phishing, Ransomware
192. Non-malicious program – Host IPS
193. Internal IP Address – no proxy-run
194. Traffic based IP Address - Reputation based
197. Component of CIA – Integrity
203. PVLAN Communicate with all – Promiscuous Port
204. Valid TCP connection – SYN-RCVD, Closed
208. Diffie-Hellman key – IKE
210. VPN tunnel establish - crypto ipsec sa
213. OAKLEY and SKEME – IKE
214. key length represent - Number of permutation
216. Technology do apply integrity, confidentially – IPSec
222. PVLAN port allow same VLAN – Isolated PVLAN
226. SYN flood attack – DoS
228. Prevent the company data – Integrity
230. Oakley cryptography – ISAKMP
231. Cisco Web Reputation – outbreak filter, web reputation
238. Deny all Policy in ZBF – Same zone
241. Stateful firewall – Connection created, state table
245. Bidirectional traffic – Static NAT
247. BYOD arch – Identity Service, Prime Infrastructure
250. TCP port 25 – ESA
252. hacks the system with script – script kiddy
254. NAT (Inside, outside) – Dynamic PAT
256. SIEM provide – multiple system, storage requirement
264. Config Cisco IOS – Select int/traffic, specify sign/conf.
274. Well-known security terms – Phishing, ransomware
277. Technology that Provide data confidentiality – IPSec
283. Preventing the Modification of data – Integrity
284. RADIUS Protocol – Authentication and Authorization
286. Host level IPS – Multi OS, offsite computer
288. Cisco IOS ZBF – Self Zone, Same Zone, Any Zone
291. App. layer firewall – DoS attack, Authenticate individual
293. verify VPN connection – crypto ipsec sa
294. TACACS+ server authentication – ASCII, PAP, MS-CHAPv1
295. IPS alert from Cisco ISR Router – SDEE, HTTPS
300. Cisco ISR Router – verify the digital signature
302. AAA implement – VPN Connection, vty ports, TACACS
306. TACACS protocol – separate AAA, encrypts the body
307. Web Application firewall – block know vulnerabilities