Cisco CCNP Enterprise EXAMINATION SET
2026 SOLVED QUESTIONS GRADED A+
● Cisco ESA can be both a physical and virtual instance. Which two
options are hypervisors that are currently supported in a virtual
implementation of Cisco ESA? (Choose two.). Answer: VMware ESXi
Kernel-based Virtual Machine (KVM)
● What are three characteristics of RADIUS? (Choose three.). Answer:
RADIUS uses UDP: RADIUS operates over the User Datagram Protocol
(UDP).
RADIUS encrypts passwords: RADIUS encrypts only the password in
the access-request packet, not the entire packet.
RADIUS uses one UDP port for authentication and one for accounting:
RADIUS typically uses different UDP ports for authentication (default
port 1812) and accounting (default port 1813).
● What are the three similarities between IDS and IPS sensors? (Choose
three.). Answer: Both use signature files to determine whether suspicious
activity is occurring:
, Both can verify that the rules of network protocols such as TCP/IP, UDP,
and ICMP are properly followed:
Both can analyze all traffic that controls layer 2 and layer 3 mappings
● Which module in the modular design approach glues all other
modules together?. Answer: Enterprise Core
● Which common defense-in-depth method can help reduce the attack
surface?. Answer: Deploying IPS, firewalls, and AAA-based platforms
and services
● What is the primary purpose of the "relative threat exposure"
regarding the Cisco CTA dashboard?. Answer: It answers the question,
"How is my organization doing as it relates to others?"
● Which statement about a DNS "blind spot" is correct?. Answer: A
blind spot is the failure to properly monitor DNS activity for security
purposes.
● What is an advantage when deploying the Talos Intelligence Group
security intelligence feed?. Answer: Provides regular updates to ensure
that the system uses up-to-date information to filter your network traffic.
2026 SOLVED QUESTIONS GRADED A+
● Cisco ESA can be both a physical and virtual instance. Which two
options are hypervisors that are currently supported in a virtual
implementation of Cisco ESA? (Choose two.). Answer: VMware ESXi
Kernel-based Virtual Machine (KVM)
● What are three characteristics of RADIUS? (Choose three.). Answer:
RADIUS uses UDP: RADIUS operates over the User Datagram Protocol
(UDP).
RADIUS encrypts passwords: RADIUS encrypts only the password in
the access-request packet, not the entire packet.
RADIUS uses one UDP port for authentication and one for accounting:
RADIUS typically uses different UDP ports for authentication (default
port 1812) and accounting (default port 1813).
● What are the three similarities between IDS and IPS sensors? (Choose
three.). Answer: Both use signature files to determine whether suspicious
activity is occurring:
, Both can verify that the rules of network protocols such as TCP/IP, UDP,
and ICMP are properly followed:
Both can analyze all traffic that controls layer 2 and layer 3 mappings
● Which module in the modular design approach glues all other
modules together?. Answer: Enterprise Core
● Which common defense-in-depth method can help reduce the attack
surface?. Answer: Deploying IPS, firewalls, and AAA-based platforms
and services
● What is the primary purpose of the "relative threat exposure"
regarding the Cisco CTA dashboard?. Answer: It answers the question,
"How is my organization doing as it relates to others?"
● Which statement about a DNS "blind spot" is correct?. Answer: A
blind spot is the failure to properly monitor DNS activity for security
purposes.
● What is an advantage when deploying the Talos Intelligence Group
security intelligence feed?. Answer: Provides regular updates to ensure
that the system uses up-to-date information to filter your network traffic.
