SRWE MODULES 10–13 | COMPLETE PRACTICE QUESTIONS, ANSWERS & STUDY
GUIDE 2026/2027
Define DDoS - correct answer ✔✔Distributed Denial of Service (DDoS) - This is a coordinated attack from
many devices, called zombies, with the intention of degrading or halting public access to an
organization's website and resources.
Define Data Breach - correct answer ✔✔Data Breach - This is an attack in which an organization's data
servers or hosts are compromised to steal confidential information.
Define Malware - correct answer ✔✔Malware - This is an attack in which an organization's hosts are
infected with malicious software that cause a variety of problems.
Describe the function of a VPN enabled router - correct answer ✔✔A VPN-enabled router provides a
secure connection to remote users across a public network and into the enterprise network.
Describe the function of a NGFW - correct answer ✔✔A Next Generation Firewall (NGFW) provides
stateful packet inspection, application visibility and control, a next-generation intrusion prevention
system (NGIPS), advanced malware protection (AMP), and URL filtering.
Describe the function of a NAC - correct answer ✔✔A Network Access Control (NAC) device includes
authentication, authorization, and accounting (AAA) services.
__________________ are hosts which commonly consist of laptops, desktops, servers, and IP phones, as
well as employee-owned devices that are typically referred to as bring your own devices (BYODs). -
correct answer ✔✔Endpoints
True or False:
Endpoints are not susceptible to malware-related attacks that originate through email or web browsing. -
correct answer ✔✔False
Define HIPS - correct answer ✔✔Host-based Intrusion Prevention System
Define AMP - correct answer ✔✔Advanced Malware Protection -
Define ESA - correct answer ✔✔Email Security Appliance.
The Cisco ESA is a device that monitors Simple Mail Transfer Protocol (SMTP). The Cisco ESA is constantly
updated by real-time feeds from the Cisco Talos, which detects and correlates threats and solutions by
using a worldwide database monitoring system.
Define WSA. What can it do? - correct answer ✔✔Web Security Appliance
, Cisco WSA can perform blacklisting of URLs, URL-filtering, malware scanning, URL categorization, Web
application filtering, and encryption and decryption of web traffic.
What do the three "A's" stand for in AAA - correct answer ✔✔Authentication, Authorization, and
Accounting.
Define the Authentication component of AAA. - correct answer ✔✔Authentication tracks who is
permitted to access a network. A username and password are commonly utilized.
Define the Authorization component of AAA. - correct answer ✔✔Authorization indicates what they can
do while they are there. Different users have different permission levels and varying access to network
resources.
Define the Accounting component of AAA. - correct answer ✔✔Accounting keeps a RECORD OF A USERS
ACTIONS on the network. The AAA server keeps a detailed log of exactly what the authenticated user
does on the device
________________ stores usernames and passwords locally in a network device such as the Cisco router.
Users authenticate against the local database. Ideal for smaller networks - correct answer ✔✔Local AAA
With the server-based method, the router accesses a central AAA server using one of two protocols. One
is TACACS+. Name the other. - correct answer ✔✔TACACS+ - Terminal Access Controller Access Control
System
RADIUS - Remote Authentication Dial-In User Service
This is a device running 802.1X-compliant client software. This device requires access to the network and
responds to requests from the switch.
A. Authentication Server
B. Authenticator
C. Supplicant - correct answer ✔✔C. Supplicant
This device acts as an intermediary. It requests identifying information from the client, verifies that
information, and relays a response to the client.
A. Authentication Server
B. Authenticator
C. Supplicant - correct answer ✔✔B. Authenticator
This device validates the identity of the client and notifies the switch or wireless access point that the
client is or is not authorized to access the LAN and switch services.
A. Authentication Server
B. Authenticator
C. Supplicant - correct answer ✔✔A. Authentication Server
GUIDE 2026/2027
Define DDoS - correct answer ✔✔Distributed Denial of Service (DDoS) - This is a coordinated attack from
many devices, called zombies, with the intention of degrading or halting public access to an
organization's website and resources.
Define Data Breach - correct answer ✔✔Data Breach - This is an attack in which an organization's data
servers or hosts are compromised to steal confidential information.
Define Malware - correct answer ✔✔Malware - This is an attack in which an organization's hosts are
infected with malicious software that cause a variety of problems.
Describe the function of a VPN enabled router - correct answer ✔✔A VPN-enabled router provides a
secure connection to remote users across a public network and into the enterprise network.
Describe the function of a NGFW - correct answer ✔✔A Next Generation Firewall (NGFW) provides
stateful packet inspection, application visibility and control, a next-generation intrusion prevention
system (NGIPS), advanced malware protection (AMP), and URL filtering.
Describe the function of a NAC - correct answer ✔✔A Network Access Control (NAC) device includes
authentication, authorization, and accounting (AAA) services.
__________________ are hosts which commonly consist of laptops, desktops, servers, and IP phones, as
well as employee-owned devices that are typically referred to as bring your own devices (BYODs). -
correct answer ✔✔Endpoints
True or False:
Endpoints are not susceptible to malware-related attacks that originate through email or web browsing. -
correct answer ✔✔False
Define HIPS - correct answer ✔✔Host-based Intrusion Prevention System
Define AMP - correct answer ✔✔Advanced Malware Protection -
Define ESA - correct answer ✔✔Email Security Appliance.
The Cisco ESA is a device that monitors Simple Mail Transfer Protocol (SMTP). The Cisco ESA is constantly
updated by real-time feeds from the Cisco Talos, which detects and correlates threats and solutions by
using a worldwide database monitoring system.
Define WSA. What can it do? - correct answer ✔✔Web Security Appliance
, Cisco WSA can perform blacklisting of URLs, URL-filtering, malware scanning, URL categorization, Web
application filtering, and encryption and decryption of web traffic.
What do the three "A's" stand for in AAA - correct answer ✔✔Authentication, Authorization, and
Accounting.
Define the Authentication component of AAA. - correct answer ✔✔Authentication tracks who is
permitted to access a network. A username and password are commonly utilized.
Define the Authorization component of AAA. - correct answer ✔✔Authorization indicates what they can
do while they are there. Different users have different permission levels and varying access to network
resources.
Define the Accounting component of AAA. - correct answer ✔✔Accounting keeps a RECORD OF A USERS
ACTIONS on the network. The AAA server keeps a detailed log of exactly what the authenticated user
does on the device
________________ stores usernames and passwords locally in a network device such as the Cisco router.
Users authenticate against the local database. Ideal for smaller networks - correct answer ✔✔Local AAA
With the server-based method, the router accesses a central AAA server using one of two protocols. One
is TACACS+. Name the other. - correct answer ✔✔TACACS+ - Terminal Access Controller Access Control
System
RADIUS - Remote Authentication Dial-In User Service
This is a device running 802.1X-compliant client software. This device requires access to the network and
responds to requests from the switch.
A. Authentication Server
B. Authenticator
C. Supplicant - correct answer ✔✔C. Supplicant
This device acts as an intermediary. It requests identifying information from the client, verifies that
information, and relays a response to the client.
A. Authentication Server
B. Authenticator
C. Supplicant - correct answer ✔✔B. Authenticator
This device validates the identity of the client and notifies the switch or wireless access point that the
client is or is not authorized to access the LAN and switch services.
A. Authentication Server
B. Authenticator
C. Supplicant - correct answer ✔✔A. Authentication Server
