ETExamTower
Sign in
300-745Updated 1d ago · Sep 4, 2026

300-745 SDSI: Designing Cisco Security Infrastructure

61 questions across 1 topics, with suggested answers, explanations where available, and imported community discussion. The first 6 questions are free to preview.

Browse questions Practice mode

Topics

#TopicQuestionsFree
1Secure Infrastructure616

Preview

6 of 61 accessible
Question 1 · Secure Infrastructure Open

An IT company experienced malicious content spreading between user endpoints, affecting business-critical resources. The company wants to implement a solution that controls communication between individual endpoints on the network. Which approach accomplishes this goal?

Answer: B Cisco TrustSec provides role-based, topology-independent segmentation by assigning users and devices to security groups and enforcing access-control policy between those groups. This limits lateral communication among endpoints and helps contain malicious-content spread. **Learn more:** [Cisco TrustSec Overview](https://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst9300/software/release/17-18/configuration_guide/cts/b_1718_cts_9300_cg/cisco_trustsec_overview.html)
Question 2 · Secure Infrastructure Open

A video game company has identified a potential SYN flood attack threat that could disrupt its online gaming services and affect user experience. The attack may overwhelm network resources by exploiting the TCP handshake process, resulting in server unavailability and degraded performance. To protect the company's infrastructure and maintain uninterrupted service, it is essential to strengthen the security measures in place. The company must deploy a solution that manages and mitigates the risk of these network-based attacks. Which security product must be implemented to mitigate similar risks?

Answer: D Cisco Secure Firewall mitigates SYN-flood denial-of-service attacks by enforcing connection limits and using TCP Intercept with SYN cookies to prevent incomplete TCP handshakes from filling a protected server’s SYN queue. [Cisco Secure Firewall ASA Firewall CLI Configuration Guide—Connection Settings](https://www.cisco.com/c/en/us/td/docs/security/asa/asa920/configuration/firewall/asa-920-firewall-config/conns-connlimits.html) **Learn more:** [Cisco Secure Firewall ASA Firewall CLI Configuration Guide—Connection Settings](https://www.cisco.com/c/en/us/td/docs/security/asa/asa920/configuration/firewall/asa-920-firewall-config/conns-connlimits.html)
Question 3 · Secure Infrastructure Open

A developer company has recently contracted with a new customer in the financial sector. The customer has multiple remote sites and requires a VPN solution using the highest encryption. Which protocol must be used during IPsec Phase 2?

Answer: A Encapsulating Security Payload (ESP) is the IPsec Phase 2 protocol that encrypts protected traffic. IKE and ISAKMP negotiate and establish the Phase 1 security association, rather than encrypting the data-plane traffic.