Cisco
Exam Name: CCIE Security written (Version 4.0)
350-018 PDF
http://www.examcertify.co.uk/350-018.html
Click the link below to buy full version as Low as $39
One of the most
essential means on how you can prepare for CCIE
SECURITY WRITTEN (VERSION 4.0) exam is by acquiring the right 350-018 study materials. This is
essential for the reason that not getting the right study materials will not
surely help you prepare and eventually passing the CCIE SECURITY WRITTEN (VERSION 4.0) certification exam. Getting
wrong study material will just waste your time and money. Some of the common
forms of the 350-018 PDF study material are
pdf, CDs and books as well as other journals. As there are numerous CCIE SECURITY WRITTEN (VERSION 4.0) materials
available out there, be sure to acquire the right one that offers you the most
recent and applicable 350-018 materials.
It would be best if you can get some 350-018
samples because getting sample will able to help you determine if the Microsoft
materials you have are designed or intended with the certification you wish to
obtain.
|
Question:
1
|
In order to reassemble IP
fragments into a complete IP datagram, which three IP header fields are
referenced by the receiver? (Choose three.)
A. don't fragment flag
B. packet is fragmented
flag
C. IP identification field
D. more fragment flag
E. number of fragments
field
F. fragment offset field
|
Answer: C,D,F
|
|
Question:
2
|
Which VTP mode allows the
Cisco Catalyst switch administrator to make changes to the VLAN configuration
that only affect the local switch and are not propagated to other switches in
the VTP domain?
A. transparent
B. server
C. client
D. local
E. pass-through
|
Answer: A
|
|
Question:
3
|
Which type of VPN is based
on the concept of trusted group members using the GDOI key management protocol?
A. DMVPN
B. SSLVPN
C. GETVPN
D. EzVPN
E. MPLS VPN
F. FlexVPN
|
Answer: C
|
|
Question:
4
|
Based on RFC 4890, what is
the ICMP type and code that should never be dropped by the firewall to allow
PMTUD?
A. ICMPv6 Type 1 – Code 0
– no route to host
B. ICMPv6 Type 1 – Code 1
– communication with destination administratively prohibited
C. ICMPv6 Type 2 – Code 0
– packet too big
D. ICMPv6 Type 3 – Code 1
– fragment reassembly time exceeded
E. ICMPv6 Type 128 – Code
0 – echo request
F. ICMPv6 Type 129 – Code
0 – echo reply
|
Answer: C
|
|
Question:
5
|
A firewall rule that
filters on the protocol field of an IP packet is acting on which layer of the
OSI reference model?
A. network layer
B. application layer
C. transport layer
D. session layer
|
Answer: A
|
|
Question:
6
|
Which layer of the OSI
model is referenced when utilizing http inspection on the Cisco ASA to filter Instant
Messaging or Peer to Peer networks with the Modular Policy Framework?
A. application layer
B. presentation layer
C. network layer
D. transport layer
|
Answer: A
|
|
Question:
7
|
When a Cisco IOS Router
receives a TCP packet with a TTL value less than or equal to 1, what will it
do?
A. Route the packet
normally
B. Drop the packet and
reply with an ICMP Type 3, Code 1 (Destination Unreachable, Host Unreachable)
C. Drop the packet and
reply with an ICMP Type 11, Code 0 (Time Exceeded, Hop Count Exceeded)
D. Drop the packet and
reply with an ICMP Type 14, Code 0 (Timestamp Reply)
|
Answer: C
|
|
Question:
8
|
In an 802.11 WLAN, which
option is the Layer 2 identifier of a basic service set, and also is typically
the MAC address of the radio of the access point?
A. BSSID
B. SSID
C. VBSSID
D. MBSSID
|
Answer: A
|
|
Question:
9
|
What term describes an
access point which is detected by your wireless network, but is not a trusted
or managed access point?
A. rogue
B. unclassified
C. interferer
D. malicious
|
Answer: A
|
|
Question:
10
|
A router has four
interfaces addressed as 10.1.1.1/24, 10.1.2.1/24, 10.1.3.1/24, and 10.1.4.1/24.
What is the smallest summary route that can be advertised covering these four
subnets?
A. 10.1.2.0/22
B. 10.1.0.0/22
C. 10.1.0.0/21
D. 10.1.0.0/16
|
Answer: C
|
|
Question:
11
|
Which two address
translation types can map a group of private addresses to a smaller group of
public addresses? (Choose two.)
A. static NAT
B. dynamic NAT
C. dynamic NAT with overloading
D. PAT
E. VAT
|
Answer: C,D
|
|
Question:
12
|
Which authentication
mechanism is available to OSPFv3?
A. simple passwords
B. MD5
C. null
D. IKEv2
E. IPsec AH/ESP
|
Answer: E
|
|
Question:
13
|
Which two IPv6 tunnel
types support only point-to-point communication? (Choose two.)
A. manually configured
B. automatic 6to4
C. ISATAP
D. GRE
|
Answer: A,D
|
|
Question:
14
|
Which two EIGRP packet
types are considered to be unreliable packets? (Choose two.)
A. update
B. query
C. reply
D. hello
E. acknowledgement
|
Answer: D,E
|
|
Question:
15
|
Before BGP update messages
may be sent, a neighbor must stabilize into which neighbor state?
A. Active
B. Idle
C. Connected
D. Established
|
Answer: D
|
No comments:
Post a Comment