Ensurepass.com : Ensure you pass the IT Exams
2018 Aug Cisco Official New Released 350-018
100% Free Download! 100% Pass Guaranteed!

CCIE Security Exam (v4.1)

Question No: 281 – (Topic 4)

Which three statements are true about objects and object groups on a Cisco ASA appliance that is running Software Version 8.4 or later? (Choose three.)

1. TCP, UDP, ICMP, and ICMPv6 are supported service object protocol types.

2. IPv6 object nesting is supported.

3. Network objects support IPv4 and IPv6 addresses.

4. Objects are not supported in transparent mode.

5. Objects are supported in single- and multiple-context firewall modes.

Answer: A,C,E

Question No: 282 – (Topic 4)

Which three statements about the TACACS protocol are correct? (Choose three.)

1. TACACS is an IETF standard protocol.

2. TACACS uses TCP port 47 by default.

3. TACACS is considered to be more secure than the RADIUS protocol.

4. TACACS can support authorization and accounting while having another separate authentication solution.

5. TACACS only encrypts the password of the user for security.

6. TACACS supports per-user or per-group for authorization of router commands.

Answer: C,D,F

Question No: 283 – (Topic 4)

What applications take advantage of a DTLS protocol?

1. delay-sensitive applications, such as voice or video

2. applications that require double encryption

3. point-to-multipoint topology applications

4. applications that are unable to use TLS

Answer: A

Question No: 284 – (Topic 4)

Refer to the exhibit.

Which statement is true?

1. This packet decoder is using relative TCP sequence numbering?.

2. This TCP client is proposing the use of TCP window scaling?.

3. This packet represents an active FTP data session?.

4. This packet contains no TCP payload.

Answer: D

Question No: 285 – (Topic 4)

Which two statement about the DNS are true? (Choose two.)

1. The client-server architecture is based on query and response messages.

2. Query and response messages have different format.

3. In the DNS message header, the QR flag set to 1 indicates a query.

4. In the DNS header, an Opcode value of 2 represents a client status request.

5. In the DNS header, the Rcode value is set to 0 in Query message.

Answer: A,D

Question No: 286 – (Topic 4)

Client MFP supplements rather than replaces infrastructure MFP. Which three are client MFP components? (Choose three.)

1. key generation and distribution

2. protection and validation of management frames

3. error reports

4. error generation

5. non-management messages protection

Answer: A,B,C

Question No: 287 – (Topic 4)

Refer to the exhibit of an ISAKMP debug.

Which message of the exchange is failing?

1. main mode 1

2. main mode 3

3. aggressive mode 1

4. main mode 5

5. aggressive mode 2

Answer: B

Question No: 288 – (Topic 4)

What does the SXP protocol exchange between peers?

1. IP to SGT binding information

2. MAC to SGT binding information

3. ingress port to SGT binding information

4. ingress switch to SGT binding information

Answer: A

Question No: 289 – (Topic 4)

Which BGP configuration forces the session to tear down when the learned routes from the neighbor exceed 10?

1. neighbor 10.0.0.1 maximum-prefix 10 80 warning-only

2. neighbor 10.0.0.1 maximum-prefix 10 80

3. neighbor 10.0.0.1 maximum-prefix 80 10 warning-only

4. neighbor 10.0.0.1 maximum-prefix 80 10

Answer: B

Question No: 290 – (Topic 4)

Which statement is true regarding Cisco ASA operations using software versions 8.3 and later?

1. The global access list is matched first before the interface access lists.

2. Both the interface and global access lists can be applied in the input or output direction.

3. When creating an access list entry using the Cisco ASDM Add Access Rule window, choosing quot;globalquot; as the interface will apply the access list entry globally.

4. NAT control is enabled by default.

5. The static CLI command is used to configure static NAT translation rules.

Answer: C

100% Ensurepass Free Download!
–350-018 PDF
100% Ensurepass Free Guaranteed!
–350-018 Dumps

	EnsurePass	ExamCollection	Testking
Lowest Price Guarantee	Yes	No	No
Up-to-Dated	Yes	No	No
Real Questions	Yes	No	No
Explanation	Yes	No	No
PDF VCE	Yes	No	No
Free VCE Simulator	Yes	No	No
Instant Download	Yes	No	No