Exit demo 350-018 CCIE Security written PDF format · free preview

Cisco 350-018 - Questions & Answers

Free preview · every answer includes a full explanation

Product page: https://prepkeys.com/350-018.html

Question 1
Single choice

Refer to the exhibit.

Identify the behavior of the ACL if it is applied inbound on E0/0.

A.

The ACL will drop both initial and noninitial fragments for port 80 only.

B.

The ACL will pass both initial and noninitial fragments for port 80 only.

C.

The ACL will pass the initial fragment for port 80 but drop the noninitial fragment for any port.

D.

The ACL will drop the initial fragment for port 80 but pass the noninitial fragment for any port.

Question 2
Multiple choice

Which two statements about the IPv6 OSPFv3 authentication Trailer are true (choose two)

A.

The AT-bit resides in the OSPFv3 Header field

B.

The IPv6 Payload length includes the length of the authentication Trailer

C.

It Provide an alternative option to OSPFv3 IPsec authentication

D.

The AT-bit must be set only in OSPFv3 Hello packets that include an Authentication Trailer

E.

The AT-bit must be set only in OSPFv3 Database Description packets that include an Authentication Trailer

F.

The OSPFv3 packet length includes the length of the Authentication Trailer

Question 3
Single choice

Which signature engine is used to create a custom IPS signature on a Cisco IPS appliance that triggers when a vulnerable web application identified by the "/ runscript.php" URI is run?

A.

AIC HTTP

B.

Service HTTP

C.

String TCP

D.

Atomic IP

E.

META

F.

Multi-String

Question 4
Multiple choice

Which three statements about NetFlow version 9 are correct? (Choose three.)

A.

It is backward-compatible with versions 8 and 5.

B.

Version 9 is dependent on the underlying transport; only UDP is supported.

C.

A version 9 export packet consists of a packet header and flow sets.

D.

Generating and maintaining valid template flow sets requires additional processing.

E.

NetFlow version 9 does not access the NetFlow cache entry directly.

Question 5
Single choice

Which port or ports are used for the FTP data channel in passive mode?

A.

random TCP ports

B.

TCP port 21 on the server side

C.

TCP port 21 on the client side

D.

TCP port 20 on the server side

E.

TCP port 20 on the client side

Question 6
Single choice

Which statement is true about an SNMPv2 communication?

A.

The whole communication is not encrypted.

B.

Only the community field is encrypted.

C.

Only the query packets are encrypted.

D.

The whole communication is encrypted.

Question 7
Single choice

Refer to the exhibit.

Which statement is true?

A.

This packet decoder is using relative TCP sequence numbering?.

B.

This TCP client is proposing the use of TCP window scaling?.

C.

This packet represents an active FTP data session?.

D.

This packet contains no TCP payload.

Question 8
Single choice

What is the purpose of the BGP TTL security check?

A.

The BGP TTL security check is used for iBGP session.

B.

The BGP TTL security check protects against CPU utilization-based attacks.

C.

The BGP TTL security check checks for a TTL value in packet header of less than or equal to for successful peering.

D.

The BGP TTL security check authenticates a peer.

E.

The BGP TTL security check protects against routing table corruption.

Question 9
Multiple choice

Which two statements about Network Edge Authentication Technology (NEAT) are true? (Choose two.)

A.

It can be configured on both access ports and trunk ports.

B.

It allows you to configure redundant links between authenticator and supplicant switches

C.

It can be configured on both access ports and EtherChannel ports.

D.

It supports port-based authentication on the authenticator switch.

E.

It conflicts with auto-configuration

F.

It requires a standard ACL on the switch port.

Question 10
Single choice

During the establishment of an Easy VPN tunnel, when is XAUTH performed?

A.

at the end of IKEv1 Phase 2

B.

at the beginning of IKEv1 Phase 1

C.

at the end of Phase 1 and before Phase 2 starts in IKEv1 and IKEv2

D.

at the end of Phase 1 and before Phase 2 starts in IKEv1

Showing 10 of 868 questions · Unlock the full set