목표가 있다면 목표를 향해 끊임없이 달려야 멋진 인생이 됩니다. 지금의 현황에 만족하여 아무런 노력도 하지 않는다면 언젠가는 치열한 경쟁을 이겨내지 못하게 될것입니다. IT업종에 종사중이시라면 다른분들이 모두 취득하는 자격증쯤은 마련해야 되지 않겠습니까? CCIE 350-018 (CCIE Security Written Exam v4.0) 시험은 요즘 가장 인기있는 자격증 시험의 한과목입니다. IT업계에서 살아남으려면 Pass4Test에서 CCIE 350-018 (CCIE Security Written Exam v4.0) 덤프를 마련하여 자격증에 도전하여 자기의 자리를 찾아보세요.
NO.1 Refer to the exhibit.
Which command caused the above messages?
A.
Neighbor 101.0.0.1 maximum-prefix 500 80 warning-only.
B. Neighbor 101.0.0.1
maximum-prefix 500 90.
C. Neighbor 101.0.0.1 maximum-prefix 500 70.
D.
Neighbor 101.0.0.1 maximum-prefix 500 70 warning-only.
Answer: C
NO.2
A network administrator uses a LAN analyzer to troubleshoot OSPF router exchange
messages
sent to all OSPF routers. To which one of these MAC addresses are
these messages sent?
A. 00-00-1C-EF-00-00
B. 01-00-5E-00-00-05
C.
01-00-5E-EF-00-00
D. EF-FF-FF-00-00-05
E. EF-00-00-FF-FF-FF
F.
FF-FF-FF-FF-FF-FF
Answer: B
NO.3 Refer to the exhibit.
On R1,
encrypt counters are incrementing. On R2, packets are decrypted, but the encrypt
counter is
not being incremented. What is the most likely cause of this
issue?
A. a routing problem on R1
B. a routing problem on R2
C.
incomplete IPsec SA establishment
D. crypto engine failure on R2
E. IPsec
rekeying is occurring
Answer: B
NO.4 Which three options are the types
of zones that are defined for anomaly detection on the Cisco
IPS Sensor?
(Choose three.)
A. inside
B. outside
C. internal
D. external
E.
illegal
F. baseline
Answer: C,D,E
NO.5 Which three types of traffic
are generally policed via CoPP policies? (Choose three.)
A. transit
traffic
B. routing protocol traffic
C. IPsec traffic
D. traffic that is
destined to any of the device's interfaces.
E. traffic from a management
protocol such as Telnet or SNMP
Answer: B,D,E
NO.6 Many guidelines can
be used to identify the areas that security policies should cover. In
which
four areas is coverage most important? (Choose four.)
A.
physical
B. host
C. user
D. document
E. incident handling and
response
F. security awareness training
Answer: A,B,C,D
NO.7 Which
action is performed first on the Cisco ASA appliance when it receives an
incoming
packet on its outside interface?
A. check if the packet is
permitted or denied by the inbound ACL applied to the outside interface
B.
check if the packet is permitted or denied by the global ACL
C. check if the
packet matches an existing connection in the connection table
D. check if the
packet matches an inspection policy
E. check if the packet matches a NAT
rule
F. check if the packet needs to be passed to the Cisco ASA AIP-SSM for
inspections
Answer: C
NO.8 Which three basic security measures are
used to harden MSDP? (Choose three.)
A. MSDP SA filters
B. MSDP state
limitation
C. MSDP MD5 neighbor authentication
D. MSDP neighbor
limitation
E. loopback interface as MSDP originator-ID
Answer:
A,B,C