CCNA Security Practice Test Results

Question 1
36% answer correctly
Which of the following is true of an IDS?
Implements blocking to stop an attacker
Only supports signatures to look for an attack
Uses IP logging to send alerts
Uses inline mode
Question 2
43% answer correctly
You have several operating groups in your enterprise that require differing access restrictions to the routers to perform their job roles. These groups range from Help Desk personnel to advanced troubleshooters. What is one methodology for controlling access rights to the routers in these situations?
Configure ACLs to control access for the different groups
Implement syslogging to monitor the activities of the groups
Configure TACACS+ to perform scalable authentication
Configure multiple privilege level access
Question 3
25% answer correctly
Which statement describes a result of securing the Cisco IOS image using the Cisco IOS image resilience feature?
The show version command does not show the Cisco IOS image file location.
When the router boots up, the Cisco IOS image is loaded from a secured FTP location.
The Cisco IOS image file is not visible in the output from the show flash command.
The running Cisco IOS image is encrypted and then automatically backed up to the NVRAM.
The running Cisco IOS image is encrypted and then automatically backed up to a TFTP server.