Cisco CCNA — Security Fundamentals, Automation and Programmability flashcards

10 of 80 cards free to study here · 2 topics · the whole deck is built into Willys

CCNA 200-301 v1.1 domains 5 and 6: device passwords and line security, ACLs and placement, port security, DHCP snooping, DAI, AAA, WPA2/WPA3, VPNs, SDN planes, Catalyst Center, REST, JSON, Ansible, Terraform and AI/ML.

Get the app All Cisco CCNA decks

Learn deck · part of Cisco CCNA · written against: Exam 200-301 v1.1 topics. Updated 2026-10-10.

Study the free sample

10 cards from the deck as they are. Flip, rate yourself, filter by topic; your progress stays in this browser.

The 10 sample cards as a list

A router runs an IOS release with a published flaw, a criminal group targets the company, and a tool abusing the flaw is circulating. Which is the vulnerability, the threat and the exploit?

The vulnerability is the flaw in that release, the threat is the group that could harm the company, and the exploit is the tool that abuses the flaw. Patching to a fixed release is the mitigation.
Security Fundamentals › Security Concepts and Programs
Why does physical access to a Cisco router's console undermine its password protection?

Anyone at the console can interrupt the boot, change the configuration register (for example to 0x2142) so the startup config is skipped, and set new passwords. Locked rooms and racks are therefore part of device security.
Security Fundamentals › Security Concepts and Programs
What do user awareness, user training and physical access control each contribute to a security program?

Awareness keeps everyone alert to risks such as phishing, training gives users formal, regular instruction in the organisation's security policies and procedures, and physical access control (badges, locks, cameras) keeps unauthorised people away from equipment.
Security Fundamentals › Security Concepts and Programs
A router has both enable password and enable secret configured with different values. Which one unlocks privileged EXEC mode?

The enable secret. When both exist, IOS ignores the enable password, which is kept only for backward compatibility.
Security Fundamentals › Device Access Control
Why is enable secret preferred over enable password?

enable secret stores a one-way hash (type 5 MD5 on many releases, or the stronger type 8 or 9 where supported), while enable password is stored in clear text unless service password-encryption is on.
Security Fundamentals › Device Access Control
Why do teams automate network configuration rather than typing it box by box?

Consistency and speed — the same tested change is pushed identically to many devices, cutting typing errors, speeding deployment and making it easy to prove compliance.
Automation and Programmability › Impact of Automation
What is configuration drift, and how does automation help?

Drift is devices slowly diverging from their intended configuration through manual one-off changes. Automation tools compare each device with a stored desired state and report or correct differences.
Automation and Programmability › Impact of Automation
Which plane does each belong to: OSPF exchanging LSAs, a switch forwarding a frame, and an engineer connecting with SSH?

OSPF is the control plane (building the tables), frame forwarding is the data plane, and SSH is the management plane.
Automation and Programmability › Controller-Based Networking
In a controller-based network, what is the difference between the northbound and southbound interfaces?

The northbound API faces applications and scripts that tell the controller what they want, usually over REST. The southbound interface faces network devices, using protocols such as NETCONF, OpenFlow, SNMP or the CLI over SSH to program them.
Automation and Programmability › Controller-Based Networking
In a controller-based fabric, what are the underlay and the overlay?

The underlay is the physical network and its routing that gives IP reachability between devices. The overlay is the set of virtual tunnels built on top of it (for example VXLAN) that carries user traffic and policy.
Automation and Programmability › Controller-Based Networking

Unlock the whole deck

You are studying a free 10-card sample. All 80 cards of Cisco CCNA — Security Fundamentals, Automation and Programmability, the other 3 Cisco CCNA decks, and spaced-repetition scheduling are built into Willys. 14-day free trial, then $14.99 a year.

Get the app

In Willys, tap Exam Library at the top of your Decks (or Browse Exam Library… under the + button), find the exam on its shelf or by search, tick it and tap Add.

More Cisco CCNA decks

Network Fundamentals and Network Access IP Connectivity and IP Services Practice Questions

← All Cisco CCNA decks, with the study guide and topic outline.

About these cards

Review status: Second-reader reviewed, with corrections applied.

Checked against:

Cisco CCNA 200-301 v1.1 exam topics — topic outline only; no text copied
Wildcard masks and JSON examples verified with the Python standard-library ipaddress and json modules
Cisco IOS XE 17.18.1 YANG data models (YangModels/yang on GitHub) and the Cisco Catalyst Center Python SDK (dnacentersdk, MIT License) — command syntax, value ranges and API flow checked; no text copied
Cisco configuration guides, command references, design guides and tech notes (cisco.com), RFC 8110 and the Wi-Fi Alliance security page — facts checked; no text copied

These are independent study notes written for Willys. They are not official exam material, may contain mistakes, and are no substitute for your course, your teacher or the exam owner's own publications. Found an error? Tell us — corrections ship as a new version of the deck.

Cisco® and CCNA® are trademarks of Cisco Systems, Inc. This product is not affiliated with or endorsed by Cisco.

Use of these pages is covered by our Terms of Use.