최신 350-018v4 무료덤프 - Cisco CCIE Security Exam (4.0)

A. EAP-TLS

B. EAP-TTLS

C. PEAP with MS-CHAPv2

D. EAP-FAST

E. EAP-GTP

A. Incident handling and response

B. Document

C. Security awareness training

D. User

E. Host

F. Physical

A. The SYN flood attack is meant to completely deplete the TCB SYN-Received state backlog.

B. The SYN flood attack can be launched for both UDP and TCP open ports on the server.

C. SYN-Received state backlog for TCBs is meant to protect server CPU cycles.

D. The SYN flood attack is always directed from valid address.

E. The SYN flood attack target is to deplete server memory so that legitimate request cannot be served.

A. RTBH source based filtering will drop traffic from a source destined to a host based on triggered entries in the RIB

B. Strict uRPF must be used in conjunction with RTBH source based filtering

C. Loose uRPF must be used in conjunction with RTBH destination based filtering

D. When setting the BGP community attribute in a route-map for RTBH use the no-export community unless BGP
confederations are used then use local-as to advertise to sub-as confederations

E. RTBH destination based filtering can drop traffic destined to a host based on triggered entries in the FIB.

F. RTBH uses a discard route on the edge devices of the network and a route server to send triggered route updates

A. It is a closed standard that manages directory-information services over distributed networks

B. It can combine AD attributes and LDAP attribute to configure group policies on the cisco ASA.

C. The cisco ASA can use more than one AD . member of attribute to match a user to multiple group policies.

D. it uses AD attribute maps to assign users to group policies configured under the webvpn contant.

E. It can assign a group policy to a user based on access credentials.

F. It uses attribute maps to map the AD member of attribute to the cisco ASA group policy attribute.

A. ESP trailer

B. TCP-UDP header

C. Data

D. ESP header

E. IP header

A. identifies a transmission channel

B. contains a shared session key

C. ensures data integrity

D. provides anti-replay protection

A. performing network posture validation

B. establishing network baselines

C. performing network optimization

D. prioritizing network roll-outs

E. performing regular network upgrades

A. traffic from a management protocol such as Telnet or SNMP

B. routing protocol traffic

C. traffic that is destined to the device interface

D. IPsec traffic

E. any traffic filtered by the access list

F. tansient traffic

A. a null zero route

B. the ip verify unicast reverse-path command

C. TCP intercept

D. CAR applied to ICMP packets

A. to provide switch port security

B. to allow an access point to act as a TACACS server to authenticate the client

C. to allow authenticated client devices to roam from one access point to another without any perceptible delay
during re-association

D. to avoid configuring PSKs (Pre-Shared Key) locally on network access devices and to configure a PSK once on a
RADIUS server

A. application

B. minimum header length

C. request method

D. transfer encoding type

E. destination address

F. source address

A. A DMVPN session will fail to establish because R2 is missing the ISAKMP peer address.

B. The tunnel configuration is incomplete and the DMVPN session will fail between R1 and R2.

C. A DMVPN session will establish between R1 and R2 provided that the BGP configuration is correct.

D. A DMVPN session will establish between R1 and R2 provided that the BGP and EIGRP configurations are correct.

E. IPsec phase-2 will fail to negotiate due to a mismatch in parameters.