최신 350-018v4 무료덤프 - Cisco CCIE Security Exam (4.0)

문제1

Which Cisco ASA feature can be used to update non-compliant antivirus/antispyware definition files on an
AnyConnect client?

A. Cisco Secure Desktop

B. dynamic access policies with Host Scan and advanced endpoint assessment

C. advanced endpoint assessment

D. dynamic access policies

정답: B

문제2

Which command is required in order for the Botnet Traffic Filter on the Cisco ASA appliance to function properly?

A. dynamic-filter whitelist

B. inspect botnet

C. inspect dns dynamic-filter-snoop

D. dynamic-filter inspect tcp/80

정답: C

문제3

Which four statements about SeND for IPv6 are correct? (Choose four.)

A. It authorizes routers to advertise certain prefixes.

B. It protects against rogue RAs.

C. NDP exchanges are protected by IPsec SAs and provide for anti-replay.

D. It defines secure extensions for NDP.

E. It provides a method for secure default router election on hosts.

F. It is facilitated by the Certification Path Request and Certification Path Response ND messages.

G. Neighbor identity protection is provided by Cryptographically Generated Addresses that are derived from a Diffie-
Hellman key exchange.

정답: A,B,D,E

문제4

Which three options are extension headers that are implemented in IPv6? (Choose three.)

A. Path MTU Discovery Header.

B. Generic Tunnel Header.

C. Quality of Service Header.

D. Encapsulating Security Payload Header.

E. Fragment Header.

F. Routing Header.

정답: D,E,F

문제5

Which two statements about cisco ASA authentication using LDAP are ture:

A. It is a closed standard that manages directory-information services over distributed networks

B. It can combine AD attributes and LDAP attribute to configure group policies on the cisco ASA.

C. The cisco ASA can use more than one AD . member of attribute to match a user to multiple group policies.

D. it uses AD attribute maps to assign users to group policies configured under the webvpn contant.

E. It can assign a group policy to a user based on access credentials.

F. It uses attribute maps to map the AD member of attribute to the cisco ASA group policy attribute.

정답: E,F

문제6

The IETF is a collaborative effort by the international community of Internet professionals to improve the design, use,
and management of the Internet. Which international organization charters the activity of IETF?

A. IANA

B. ISO

C. ISOC

D. RIR

E. IEC

정답: C

문제7

Which of the following provides the features of route summarization, assignment of contiguous blocks of addresses,
and combining routes for multiple classful networks into a single route?

A. route summarization

B. supernetting

C. private IP addressing

D. classless interdomain routing

정답: D

문제8

Before BGP update messages may be sent, a neighbor must stabilize into which neighbor state?

A. Connected

B. Established

C. Idle

D. Active

정답: B

문제9

Which statement is true about the Cisco ASA interface monitoring?

A. It is possible to configure a context to monitor a shared interface.

B. If the monitored interface has both IPv4 and IPv6 addresses then it cannot be monitored.

C. Interfaces of the same context cannot be monitored.

D. ASA does not clear the received packets count on the monitored interface before running the tests.

정답: A

설명: (DumpTOP 회원만 볼 수 있음)

문제10

Which two statements about OSPF authentication are true? (Choose two.)

A. Type-3 authentication is a clear-text password authentication.

B. In MD5 authentication, the password never goes across the network.

C. OSPF authentication is required in area 0.

D. There are three types of OSPF authentication.

E. In MD5 authentication, the password is encrypted when it is sent.

F. Null authentication includes the password in clear-text.

정답: B,D

문제11

Which protocol is superseded by AES?

A. RC4

B. DES

C. RSA

D. MD5

정답: B

문제12

Refer to the exhibit.

When configuring a Cisco IPS custom signature, what type of signature engine must you use to block podcast clients
from accessing the network?

A. service HTTP

B. fixed TCP

C. string TCP

D. service TCP

E. service GENERIC

정답: A

문제13

Which standard prescribes a risk assessment to identify whether each control is required to decrease risks and if so, to
which extent it should be applied?

A. HIPPA

B. ISO 17799

C. ISO 9000

D. ISO 27002

E. ISO 27001

정답: E

문제14

What is the recommended network MACSec policy mode for high security deployments?

A. high-impact

B. should-secure

C. must-secure

D. must-not-secure

E. monitor-only

정답: C

최신 350-018v4 무료덤프 - Cisco CCIE Security Exam (4.0)

우리와 연락하기

유용한 링크

최신 업데이트