1
Single choice~60s
Which AAA function determines what an authenticated administrator may do?
CCNP Enterprise ENARSI
CISCO_ENARSI_300_410Ready to test yourself?
A timed, blueprint-proportional exam drawn fresh from this bank — with a per-domain score report.
🔓 Free preview: showing 10 of 200 questions. Unlock the full bank — every question, explanation, and reference.
Unlock all 200 questions →10 questions across 4 topics. Choose an answer for each question, then check it to see the correct answer and explanation.
Filter by topic
10 questions in Infrastructure Security
D3_SEC
Infrastructure Security
10 questions in topicAAA with TACACS+ and RADIUS, method lists and privilege delegation, ACL types and evaluation including IPv6 behavior, uRPF modes, control plane policing and protection, IPv6 first hop security, routing protocol authentication, and device hardening.
2
Single choice~60s
Which uRPF mode requires the source address to be reachable via the interface the packet arrived on?
3
Single choice~80s
Which failure does a local fallback in an AAA method list protect against?
4
Single choice~80s
An administrator authenticates successfully but is dropped to a user-level prompt. Where does the fault lie?
5
Single choice~80s
Which mechanism restricts which source addresses may open a management session on the VTY lines?
6
Single choice~80s
Which ACL placement rule follows from the fact that a standard ACL matches only the source address?
7
Single choice~80s
Which ACL keyword matches TCP segments that are part of an already-established session?
8
Single choice~80s
Which behavior of IPv6 ACLs commonly causes a total loss of connectivity when overridden?
9
Single choice~80s
Which control plane feature divides punted traffic into host, transit, and CEF-exception categories?
10
Single choice~80s
Which IPv6 first hop security feature blocks unauthorized DHCPv6 server messages?