20+ practice questions focused on Security — one of the most tested topics on the Cisco Certified Support Technician - Networking exam. Each question includes a detailed explanation so you learn why the right answer is correct.
Start Security PracticeRefer to the exhibit. A technician notices a port has stopped functioning. Based on the output, what is the most likely cause of the interface status?
Explanation: While the logic regarding port-security is sound, the question is incomplete without the exhibit. To be valid, the exhibit must show the 'Port Status' as 'secure-shutdown' or 'err-disabled' with a violation count.
A small office network uses a Cisco router for internet connectivity. The administrator wants to prevent users from accessing a known malicious website by blocking all traffic to its IP address. Which security feature should the administrator configure on the router to achieve this?
Explanation: To block traffic to a specific external IP address, an ACL should be applied inbound on the interface connected to the internal network. This ensures that packets destined for the malicious IP are dropped before they are routed. Outbound ACLs would not prevent internal users from initiating connections. Port security and VACLs are not appropriate for this task on a router.
A network engineer is hardening a Cisco switch that serves a public lobby. The engineer wants to ensure that if an unauthorized device is plugged into an access port, the port automatically stops forwarding traffic and generates a syslog message, but does not require manual intervention to recover. Which port security violation mode and recovery configuration should the engineer use?
Explanation: Restrict mode drops the violating traffic, increments the security violation counter, and generates a syslog message, which meets the logging requirement. Configuring errdisable recovery for the psecure-violation cause lets the port automatically return to service after the recovery timer expires, so no manual intervention is needed, making this combination the best fit for the lobby access ports.
A network administrator needs to prevent unauthorized devices from connecting to switch ports. Which feature provides the most effective Layer 2 security by verifying the MAC address of the connected device against a database?
Explanation: Port Security allows administrators to secure access to ports by locking a specific MAC address to that port. This prevents unauthorized devices from gaining network access. In a Cisco enterprise environment, this is a fundamental defense-in-depth measure against unauthorized physical access. By restricting the number and identity of MAC addresses, the network remains resilient against simple spoofing or unauthorized hardware insertions, ensuring that only trusted endpoints communicate through the designated access layer infrastructure.
Which TWO of the following are primary security benefits of implementing an Access Control List (ACL) on a Cisco router interface?
Explanation: ACLs are essential tools for traffic filtering and network segmentation. By controlling which packets are permitted or denied based on source, destination, and protocol, administrators enforce security policies at the network edge or between VLANs. Understanding how ACLs manage traffic flow is critical for maintaining network integrity and preventing unauthorized data access, as they provide the fundamental mechanism for restricting communication between sensitive network segments in a controlled and highly audit-able manner.
+15 more Security questions available
Practice all Security questions1. Baseline your knowledge
Start with 10 questions to gauge your current understanding of Security. This tells you whether you need a concept refresher or just practice.
2. Review every explanation
For each question — right or wrong — read the full explanation. Understanding why an answer is correct is more valuable than knowing the answer itself.
3. Focus on exam traps
Security questions on the 100-150 frequently use trap wording. Look for subtle differences in answers that test your precision, not just general knowledge.
4. Reach 80% consistently
Do repeated sessions until you score 80%+ three times in a row. Then move to mixed-mode practice to test cross-topic recall under realistic conditions.
The exact number varies per candidate. Security is tested as part of the Cisco Certified Support Technician - Networking blueprint. Practicing with targeted Security questions ensures you can handle any format or difficulty that appears.
Yes. Courseiva provides free 100-150 practice questions across all exam topics and domains. The platform includes topic-based practice, mock exams, missed-question review, bookmarked questions, and readiness tracking — no account required.
Difficulty is subjective, but Security is a high-priority exam concept tested in multiple ways — direct recall, scenario analysis, and command-output interpretation. Consistent practice is the best way to build confidence.
Launch a full Security practice session with instant scoring and detailed explanations.
Start Security Practice →