FirstTry

Objective 5.1

200-301

Define key security concepts (threats, vulnerabilities, exploits, and mitigation techniques).

Objective 5.1 sits in Security Fundamentals, which carries 15% of the CCNA exam. The questions below are original, written from the official objective title above, and each explanation cites the Cisco page it rests on.

Objective title verbatim from the official objectives. Cisco exam page ↗

A worked example

Shown solved, with the whole explanation open: this is what every question here carries.

5-1Security Fundamentals

An attacker on a guest segment captures traffic and recovers a login sent in the clear, without sending a single packet. How is that attack classified?

An active attack on the login serverReuse of the credential later is active, and the capture itself is the part being classified here.
A blind attack against the guest segmentA blind attacker writes packets without seeing replies, which is the opposite position.
A passive attack on the guest trafficCorrect · your answerCorrect. Reading traffic without writing any is the passive category.
A denial of service on the login serverDenial of service removes availability, and this attacker took information instead.

Correct.

Checked against datatracker.ietf.org, August 2026

Concept

Attacks are usefully sorted by what the attacker has to be able to do rather than by the damage they cause. Reading traffic and injecting traffic need different positions on a network, so the two demand different defenses.

Why C

Reading packets without writing any is the passive category, and password capture is its classic case. The later login with the captured password is active, but the capture that made it possible required no writing at all.

Source

In a passive attack, the attacker reads packets off the network but does not write them.

IETF RFC 3552, Guidelines for Writing RFC Text on Security Considerations, section 3, checked August 2026
#security concepts#threats#passive attack

Now you: objective 5.1 questions

No account needed. The explanation opens when you answer.

Sample question 1 of 3

5-1Security Fundamentals

A shared hub in a lab is replaced by a switch. An analyzer attached to a free port now sees far less of the other stations' traffic than it did before. What explains the change?

Sample question 2 of 3

5-1Security Fundamentals

Packets arriving on a branch router's Internet interface carry source addresses from the company's internal range. Which control drops them?

Sample question 3 of 3

5-1Security Fundamentals

An attacker can inject forged packets into a path but cannot see any of the replies. Which description fits that position?

That’s 3 of the full CCNA bank.

Keep going free: 10 questions per certification in bank practice, with no account.

Continue practicing

Read the sources

These are the official pages the questions above cite. Reading them is studying the objective from the primary source, which is what the explanations point you toward anyway.

More objectives in Security Fundamentals