Ensurepass.com : Ensure you pass the IT Exams
2018 Aug Cisco Official New Released 350-018
100% Free Download! 100% Pass Guaranteed!

CCIE Security Exam (v4.1)

Question No: 361 – (Topic 4)

Which two statements about the multiple context mode running Version 9.x are true? (Choose two.)

1. RIP is not supported.

2. An interface cannot be shared by multiple contexts.

3. Remote access VPN is supported.

4. Only the admin and context configuration files are supported.

5. OSPFv3 is supported.

6. Multicast feature is supported

7. Site-To-Site VPN feature is supported

Answer: A,G

Question No: 362 – (Topic 4)

Which three nonproprietary EAP methods do not require the use of a client-side certificate for mutual authentication? (Choose three.)

1. LEAP

2. EAP-TLS

3. PEAP

4. EAP-TTLS

5. EAP-FAST

Answer: C,D,E

Question No: 363 – (Topic 4)

Which three HTTP header fields can be classified by NBAR for request messages? (Choose three.)

1. User-Agent

2. Server

3. Referrer

4. Content-Encoding

5. Location

6. From

Answer: A,C,F

Question No: 364 – (Topic 4)

Which four types of VPN natively provide encryption of user traffic? (Choose four.)

1. MPLS

2. IPsec

3. L2TPv3

4. SSL

5. VPLS

6. AToM

7. GETVPN

8. Microsoft PPTP

Answer: B,D,G,H

Question No: 365 – (Topic 4)

What is needed to verify a digital signature that was created using an RSA algorithm?

1. public key

2. private key

3. both public and private key

4. trusted third-party certificate

Answer: A

Question No: 366 – (Topic 4)

After a client discovers a supportable wireless network, what is the correct sequence of operations that the client will take to join it?

1. association, then authentication

2. authentication, then association

3. probe request, then association

4. authentication, then authorization

Answer: B

Question No: 367 – (Topic 4)

Which two statements about an authoritative server in a DNS system are true? (Choose two.)

1. It indicates that it is authoritative for a name by setting the AA bit in responses.

2. It has a direct connection to one of the root name servers.

3. It has a ratio of exactly one authoritative name server per domain.

4. It cannot cache or respond to queries from domains outside its authority.

5. It has a ratio of at least one authoritative name server per domain.

Answer: A,E

Question No: 368 – (Topic 4)

Hierarchical priority queuing is used on the interfaces on which you enable a traffic-shaping queue. Which two statements about hierarchical priority queuing are true? (Choose two.)

1. Priority packets are never dropped from the shape queue unless the sustained rate of priority traffic exceeds the shape rate.

2. For IPsec-encrypted packets, you can match traffic based only on the DSCP or precedence setting.

3. IPsec over TCP is not supported for priority traffic classification.

4. For IPsec-encrypted packets, you cannot match traffic based on the DSCP or precedence setting.

5. IPsec over TCP is supported for priority traffic classification.

Answer: B,C

Question No: 369 – (Topic 4)

A Cisco IOS router is configured as follows: ip dns spoofing 192.168.20.1

What will the router respond with when it receives a DNS query for its own host name?

1. The router will respond with the IP address of the incoming interface.

2. The router will respond with 192.168.20.1 only if the outside interface is down.

3. The router will respond with 192.168.20.1.

4. The router will ignore the DNS query and forward it directly to the DNS server.

Answer: B

Question No: 370 – (Topic 4)

Which IPv4 header field usually increments for each subsequent packet sent?

1. Flag

2. Fragment Offset

3. Identification

4. Time To Live

Answer: C

100% Ensurepass Free Download!
–350-018 PDF
100% Ensurepass Free Guaranteed!
–350-018 Dumps

	EnsurePass	ExamCollection	Testking
Lowest Price Guarantee	Yes	No	No
Up-to-Dated	Yes	No	No
Real Questions	Yes	No	No
Explanation	Yes	No	No
PDF VCE	Yes	No	No
Free VCE Simulator	Yes	No	No
Instant Download	Yes	No	No