Apply network security
7 practice questions under this official exam objective (350-601), each with the answer key, an option-by-option explanation and instant feedback.
Questions under this objective
7 total · page 1 of 1Enforcing Intra-EPG Isolation with an Intra-EPG Contract in Cisco ACI
To permit only ICMP within an EPG while blocking all other intra-EPG traffic, enable Intra-EPG Isolation (Enforced) on the EPG and then configure an I
VLAN Hopping Attack Scenario Analysis
This question tests knowledge of Layer 2 attacks that bypass VLAN isolation. VLAN hopping (C) is the correct answer as it allows traffic to cross from
Securely Accessing Network Appliances Remotely
Learn why SSH is the best way to securely access a network appliance from an external location compared to Telnet, RDP, and FTPS in N10-009 exams.
Advantage of IDS over IPS Deployment
This N10-009 question highlights that the primary advantage of an IDS over an IPS is its non-disruptive deployment due to passive monitoring capabilit
Using Honey Nets to Capture Attacker TTPs
This N10-009 question identifies the honey net as the correct tool for capturing attacker TTPs. Learn how deception technology differs from IDS/IPS fo
802.1X BYOD Access: Why NAC Beats ACLs and MAC Filtering
The question tests which control supports an 802.1X architecture for BYOD access to a trusted wireless network, and the answer is NAC (D), not an ACL,
Blocking External Proxy Bypass of Firewall URL Filtering
External proxy bypass of firewall URL filtering is mitigated by adding an outbound firewall ACE that blocks employee access to the proxy server. This