CCNA Security Practice Test Results

Question 1
56% answer correctly
What is the goal of an overall security challenge when planning a security strategy?
To harden all exterior-facing network components
To educate employees to be on the lookout for suspicious behavior
To find a balance between the need to open networks to support evolving business requirements and the need to inform
To install firewalls at all critical points in the network
Question 2
25% answer correctly
Which statement describes a result of securing the Cisco IOS image using the Cisco IOS image resilience feature?
When the router boots up, the Cisco IOS image is loaded from a secured FTP location.
The running Cisco IOS image is encrypted and then automatically backed up to a TFTP server.
The Cisco IOS image file is not visible in the output from the show flash command.
The running Cisco IOS image is encrypted and then automatically backed up to the NVRAM.
The show version command does not show the Cisco IOS image file location.
Question 3
40% answer correctly
Which statement is true when configuring access control lists (ACLs) on a Cisco router?
An "implicit deny" is applied to the start of the ACL entry by default.
Apply the ACL to the interface prior to configuring access control entries to ensure that controls are applied immediately upon configuration.
Only one ACL per protocol, per direction, and per interface is allowed.
ACLs filter all traffic through and sourced from the router.