Endpoint Security
This Cisco solution performs file analysis in a sandbox, comparing it against billions of samples and artifacts
What is Cisco Secure Malware Analytics (formerly Threat Grid)
This NAC technique enables port-based access using the physical hardware address of an endpoint
What is MAB or MAC Authentication Bypass
These are the two types of numbered ACLs
What are standard and extended
These three words make up the AAA acronym
What is authentication, authorization, and accounting
This type of password protection for CLI is the least secure, as they are shown in plaintext, and not recommended to be used
What are type 0
This Cisco solution relies upon data such as NetFlow to correlate telemetry, detecting threats within a network
What is Cisco Secure Network Analytics (formerly Stealthwatch)
This layer 2 hop-by-hop encryption method only encrypts traffic on the wire between two peers
What is MACsec
This implicit command exists at the end of every ACL
What is 'deny any'
This AAA protocol separates the three steps into independent functions
What is TACACS+
This security feature is specifically designed to protect the processor on a networking device
True or False: without ISE, it would not be possible to implement pxGrid
What is True
This Cisco-created protocol allows for group policy mapping on devices that don't support inline tagging
What is SGT Exchange Protocol or SXP
This part of an ACL determines which bits of an IP address must match for a given statement to apply
What is wildcard mask (inverted subnet mask)
<<DAILY DOUBLE>>
RADIUS is the AAA transport protocol for this protocol, making it preferred for secure wired/wireless network access
What is Extensible Authentication Protocol or EAP
These are the two system-built zones for ZBFW
What are self zone and default zone
This protocol has been deprecated by the IETF in favor of TLS, which is more secure
What is Secure Sockets Layer or SSL
Name two of the three roles that take part in 802.1x network deployments
What are supplicant, authenticator, and authentication server
This is the number of ACLs supported on a single Cisco Router interface
What is two (one inbound, one outbound)
This is the port over which TACACS+ communicates
What is TCP port 49
This command disconnects terminal line users that are idle
What is 'exec-timeout'
These two acquisitions brought two of the three security research teams that played a roll in the creation of Cisco Talos
What are IronPort and Sourcefire
Dynamic SGT assignment requires one of these three authentication methods
What are 802.1x, MAB, or WebAuth
This is the beginning syntax to apply an ACL to an interface
What is ip access-group
This command enables AAA functions on an IOS XE device
What is 'aaa new-model'
These are the three methods or "lines" to gain access to the CLI of an IOS XE device
What are console port (cty), auxiliary port (aux), and virtual terminal (vty)