CCNA Security Practice Test Results

Question 1
55% answer correctly
Which statement is true when using zone-based firewalls on a Cisco router?
The firewalls can be configured simultaneously on the same interface as classic CBAC using the ip inspect CLI command.
When configured with the "PASS" action, stateful inspection is applied to all traffic passing between the configured zones.
Interface ACLs are applied before zone-based policy firewalls when they are applied outbound.
Policies are applied to traffic moving between zones, not between interfaces.
Question 2
25% answer correctly
Which statement describes a result of securing the Cisco IOS image using the Cisco IOS image resilience feature?
The running Cisco IOS image is encrypted and then automatically backed up to a TFTP server.
When the router boots up, the Cisco IOS image is loaded from a secured FTP location.
The show version command does not show the Cisco IOS image file location.
The running Cisco IOS image is encrypted and then automatically backed up to the NVRAM.
The Cisco IOS image file is not visible in the output from the show flash command.
Question 3
47% answer correctly
When implementing network security, what is an important configuration task that you should perform to assist in correlating network and security events?
Configure an automated network monitoring system for event correlation.
Configure synchronized syslog reporting.
Configure Network Time Protocol.
Configure a common repository of all network events for ease of monitoring.