Ensurepass.com : Ensure you pass the IT Exams
2018 Aug Cisco Official New Released 350-018
100% Free Download! 100% Pass Guaranteed!
CCIE Security Exam (v4.1)
Question No: 301 – (Topic 4)
Which IPS module can be installed on the Cisco ASA 5520 appliance?
-
IPS-AIM
-
AIP-SSM
-
AIP-SSC
-
NME-IPS-K9
-
IDSM-2
Answer: B
Question No: 302 – (Topic 4)
Which two options describe the main purpose of EIGRP authentication? (Choose two.)
-
To identify authorized peers.
-
To allow faster convergence
-
To provide redundancy
-
To prevent injection of incorrect routing information.
-
To provide routing updates confidentiality
Answer: A,D
Question No: 303 – (Topic 4)
Which action is performed first on the Cisco ASA appliance when it receives an incoming packet on its outside interface?
-
check if the packet is permitted or denied by the inbound ACL applied to the outside interface
-
check if the packet is permitted or denied by the global ACL
-
check if the packet matches an existing connection in the connection table
-
check if the packet matches an inspection policy
-
check if the packet matches a NAT rule
-
check if the packet needs to be passed to the Cisco ASA AIP-SSM for inspections
Answer: C
Question No: 304 – (Topic 4)
Refer to the exhibit.
If SW4 is sending superior BPDUs, where should the root guard feature be configured to preserve SW3 as a root bridge?
-
SW4 Gi0/0 interface.
-
Sw3 Gi0/0 interface.
-
Sw2 Gi0/1 interface.
-
SW2 Gi0/1 and SW3 Gi0/1
Answer: C
Question No: 305 – (Topic 4)
Which two methods are used for forwarding traffic to the Cisco ScanSafe Web Security service? (Choose two.)
-
Cisco AnyConnect VPN Client with Web Security and ScanSafe subscription
-
Cisco ISR G2 Router with SECK9 and ScanSafe subscription
-
Cisco ASA adaptive security appliance using DNAT policies to forward traffic to ScanSafe subscription servers
-
Cisco Web Security Appliance with ScanSafe subscription
Answer: B,C
Question No: 306 – (Topic 4)
Which two statements about DHCP are true? (Choose two.)
-
DHCP uses TCP port 67.
-
DHCP uses UDP ports 67 and 68.
-
The DHCPDiscover packet has a multicast address of 239.1.1.1.
-
DHCPRequest is a broadcast message.
-
The DHCPOffer packet is sent from the DHCP server.
Answer: B,E
Question No: 307 – (Topic 4)
Which two statements about NHRP are true? (Choose two.)
-
NHRP is used for broadcast multi-access networks.
-
NHRP allows NHC to dynamically learn the mapping of VPN IP to NBMA IP.
-
NHRP allows NHS to dynamically learn the mapping of VPN IP to BMA IP.
-
NHC registers with NHS.
-
Traffic between two NHCs always flows through the NHS.
-
NHRP provides Layer-2 to Layer-3 address mapping.
Answer: B,D
Question No: 308 – (Topic 4)
When is the supplicant considered to be clientless?
-
when the authentication server does not have credentials to authenticate.
-
when the authenticator is missing the dot1x guest VLAN under the port with which the supplicant is connected.
-
when the supplicant fails EAP-MD5 challenge with the authentication server.
-
when the supplicant fails to respond to EAPOL messages from the authenticator.
-
when the authenticator is missing the reauthentication timeout configuration under the port with which the supplicant is connected.
Answer: D
Question No: 309 – (Topic 4)
Which three RADIUS protocol statements are true? (Choose three.)
-
RADIUS protocol runs over TCP 1645 and 1646.
-
Network Access Server operates as a server for RADIUS.
-
RADIUS packet types for authentication include Access-Request, Access-Challenge, Access-Accept, and Access-Reject.
-
RADIUS protocol runs over UDP 1812 and 1813.
-
RADIUS packet types for authentication include Access-Request, Access-Challenge, Access-Permit, and Access-Denied.
-
RADIUS supports PPP, PAP, and CHAP as authentication methods.
Answer: C,D,F
Question No: 310 – (Topic 4)
Which two MAC authentication methods are supported on WLCs? (Choose two.)
-
local MAC authentication
-
MAC authentication using a RADIUS server
-
MAC authentication using tokens
-
MAC authentication using a PIN
Answer: A,B
100% Ensurepass Free Download!
–350-018 PDF
100% Ensurepass Free Guaranteed!
–350-018 Dumps
EnsurePass | ExamCollection | Testking | |
---|---|---|---|
Lowest Price Guarantee | Yes | No | No |
Up-to-Dated | Yes | No | No |
Real Questions | Yes | No | No |
Explanation | Yes | No | No |
PDF VCE | Yes | No | No |
Free VCE Simulator | Yes | No | No |
Instant Download | Yes | No | No |