Cisco 350-018v4 (CCIE Security Exam (4.0)) 시험을 패스하려면 품질좋은 시험대비 알맞춤 덤프가 있으면 훨씬 편해집니다.pass4test에서 최선을 다해 발췌한 Cisco 350-018v4 (CCIE Security Exam (4.0)) 시험자료는 Cisco 350-018v4 (CCIE Security Exam (4.0)) 실제시험에 대비하여 제작한 최고의 시험대비자료입니다.pass4test의 전문가들은 IT업계에 오래동안 종사하여 얻은 노하우로 Cisco 350-018v4 (CCIE Security Exam (4.0)) 시험패스에 가장 편한 시험자료를 연구하는데 많은 심혈을 기울였습니다.
NO.1 Which three statements about the Cisco IPS sensor are true? (Choose
three.)
A. You cannot pair a VLAN with itself.
B. For a given sensing
interface, an interface used in a VLAN pair can be a member of another
inline
interface pair.
C. For a given sensing interface, a VLAN can be a
member of only one inline VLAN pair, however, a
given VLAN can be a member of
an inline VLAN pair on more than one sensing interface.
D. The order in which
you specify the VLANs in a inline pair is significant.
E. A sensing interface
in inline VLAN pair mode can have from 1 to 255 inline VLAN pairs.
Answer:
A,C,E
NO.2 Management Frame Protection is available in two deployment
modes, Infrastructure and Client.
Which three statements describe the
differences between these modes? (Choose three.)
A. Infrastructure mode
appends a MIC to management frames.
B. Client mode encrypts management
frames.
C. Infrastructure mode can detect and prevent common DoS
attacks.
D. Client mode can detect and prevent common DoS attacks.
E.
Infrastructure mode requires Cisco Compatible Extensions version 5 support on
clients.
Answer: A,B,D
NO.3 Which three multicast features are
supported on the Cisco ASA? (Choose three.)
A. PIM sparse mode?
B. IGMP
forwarding?
C. Auto-RP
D. NAT of multicast traffic?
Answer:
A,B,D
NO.4 Which statement about the ASA redundant interface is
true?
A. It is a logical interface that combines two physical interfaces,
both of which are active.
B. It can only be used for failover links.
C. By
default, the first physical interface that is configured in the pair is the
active interface.
D. The redundant interface uses the MAC address of the
second physical interface in the pair.
Answer: C
NO.5 Which three
statements about the TACACS protocol are correct? (Choose three.)
A. TACACS+
is an IETF standard protocol.
B. TACACS+ uses TCP port 47 by default.
C.
TACACS+ is considered to be more secure than the RADIUS protocol.
D. TACACS+
can support authorization and accounting while having another separate
authentication
solution.
E. TACACS+ only encrypts the password of the user
for security.
F. TACACS+ supports per-user or per-group for authorization of
router commands.
Answer: C,D,F
NO.6 Which feature can be implemented
to avoid any MPLS packet loss?
A. IP TTL propagation
B. LDP IGP sync
C.
label advertisement sync
D. conditional label advertisement
E.
PHP
Answer: B
NO.7 Which statement about the TACACS+ AV pair is
true?
A. AV pair value is integer.
B. Cisco ACS does not support
accounting AV pairs.
C. AV pair values could be both strings and
integers.
D. AV pair does not have value type.
Answer: D
NO.8 Which
three statements about VXLANs are true? (Choose three.)
A. It requires that
IP protocol 8472 be opened to allow traffic through a firewall.
B. Layer 2
frames are encapsulated in IP, using a VXLAN ID to identify the source VM.
C.
A VXLAN gateway maps VXLAN IDs to VLAN IDs.
D. IGMP join messages are sent by
new VMs to determine the VXLAN multicast IP.
E. A VXLAN ID is a 32-bit
value.
Answer: B,C,D
three.)
A. You cannot pair a VLAN with itself.
B. For a given sensing
interface, an interface used in a VLAN pair can be a member of another
inline
interface pair.
C. For a given sensing interface, a VLAN can be a
member of only one inline VLAN pair, however, a
given VLAN can be a member of
an inline VLAN pair on more than one sensing interface.
D. The order in which
you specify the VLANs in a inline pair is significant.
E. A sensing interface
in inline VLAN pair mode can have from 1 to 255 inline VLAN pairs.
Answer:
A,C,E
NO.2 Management Frame Protection is available in two deployment
modes, Infrastructure and Client.
Which three statements describe the
differences between these modes? (Choose three.)
A. Infrastructure mode
appends a MIC to management frames.
B. Client mode encrypts management
frames.
C. Infrastructure mode can detect and prevent common DoS
attacks.
D. Client mode can detect and prevent common DoS attacks.
E.
Infrastructure mode requires Cisco Compatible Extensions version 5 support on
clients.
Answer: A,B,D
NO.3 Which three multicast features are
supported on the Cisco ASA? (Choose three.)
A. PIM sparse mode?
B. IGMP
forwarding?
C. Auto-RP
D. NAT of multicast traffic?
Answer:
A,B,D
NO.4 Which statement about the ASA redundant interface is
true?
A. It is a logical interface that combines two physical interfaces,
both of which are active.
B. It can only be used for failover links.
C. By
default, the first physical interface that is configured in the pair is the
active interface.
D. The redundant interface uses the MAC address of the
second physical interface in the pair.
Answer: C
NO.5 Which three
statements about the TACACS protocol are correct? (Choose three.)
A. TACACS+
is an IETF standard protocol.
B. TACACS+ uses TCP port 47 by default.
C.
TACACS+ is considered to be more secure than the RADIUS protocol.
D. TACACS+
can support authorization and accounting while having another separate
authentication
solution.
E. TACACS+ only encrypts the password of the user
for security.
F. TACACS+ supports per-user or per-group for authorization of
router commands.
Answer: C,D,F
NO.6 Which feature can be implemented
to avoid any MPLS packet loss?
A. IP TTL propagation
B. LDP IGP sync
C.
label advertisement sync
D. conditional label advertisement
E.
PHP
Answer: B
NO.7 Which statement about the TACACS+ AV pair is
true?
A. AV pair value is integer.
B. Cisco ACS does not support
accounting AV pairs.
C. AV pair values could be both strings and
integers.
D. AV pair does not have value type.
Answer: D
NO.8 Which
three statements about VXLANs are true? (Choose three.)
A. It requires that
IP protocol 8472 be opened to allow traffic through a firewall.
B. Layer 2
frames are encapsulated in IP, using a VXLAN ID to identify the source VM.
C.
A VXLAN gateway maps VXLAN IDs to VLAN IDs.
D. IGMP join messages are sent by
new VMs to determine the VXLAN multicast IP.
E. A VXLAN ID is a 32-bit
value.
Answer: B,C,D