Cisco CCIE Security Exam (4.0) - 350-018v4 Free Exam Questions

A. man-in-the-middle

B. Layer 1 DoS

C. MAC spoofing

D. disassociation attack

A. The client profile will match the authorization profile defined in the AAA server

B. The server will accept secure HTTP connections from clients defined in the AAA server

C. The server will accept secure HTTP connections from clients with signed security certificates

D. The clients are added to the cipher suite*s profile

E. The HTTP server and client will negotiate the cipher suite encryption parameters

A. The Cisco Easy VPN Server should apply split-tunnel-policy excludespecified with a split-tunnel-list containing the
local LAN addresses that are relevant to the client.

B. The Cisco Easy VPN Server must push down an interface ACL that permits the traffic to the local LAN from the
client.

C. The Cisco Easy VPN Server should apply a split-tunnel-policy tunnelall policy to the client.

D. The Cisco Easy VPN client machine needs to have multiple NICs to support this.

E. The IP address that is assigned by the Cisco Easy VPN Server to the client must be on the same network as the local
LAN of the client.

A. UDP 4500

B. UDP 848

C. UDP 1812

D. UDP 500

A. The data channel is using a 7-bit transfer mode.

B. The FTP client opens too many concurrent data connections.

C. The data channel is originating from a server side.

D. The FTP server sends chunks of data that are too big.

A. This TCP client is proposing the use of TCP window scaling?.

B. This packet decoder is using relative TCP sequence numbering?.

C. This packet represents an active FTP data session?.

D. This packet contains no TCP payload.

A. incorrect IPsec phase-2 configuration on the server

B. incomplete ISAKMP profile configuration on the server

C. ISAKMP key mismatch

D. incorrect group configuration on the client

E. incorrect ACL in the ISAKMP client group configuration

A. All the routers running RIP on the local network.

B. All NTP servers on the local network.

C. All nodes on the local network.

D. All PIM routers on the local network.

A. DoS

B. Trojan horse

C. botnet

D. privilege escalation

A. It has a ratio of exactly one authoritative name server per domain.

B. It cannot cache or respond to queries from domains outside its authority.

C. It has a ratio of at least one authoritative name server per domain.

D. It indicates that it is authoritative for a name by setting the AA bit in responses.

E. It has a direct connection to one of the root name servers.

A. 10.22.21.128/26

B. 10.22.20.0/23

C. 10.22.16.0/22

D. 10.22.22.128/26

E. 10.22.22.0/27

A. check if the packet matches an existing connection in the connection table

B. check if the packet is permitted or denied by the inbound ACL applied to the outside interface

C. check if the packet is permitted or denied by the global ACL

D. check if the packet matches an inspection policy

E. check if the packet matches a NAT rule

F. check if the packet needs to be passed to the Cisco ASA AIP-SSM for inspections

A. ICMP type 136 and the Broadcast address

B. ICMP type 135 and the All-Routers multicast address

C. ICMP type 136 and the All-Routers multicast address

D. ICMP type 135 and the Solicited-Node multicast address

E. ICMP type 136 and the Solicited-Node multicast address

F. ICMP type 135 and the Broadcast address

A. SAP key

B. Service ID
F: Server peers information

C. Peer device ID

D. Server device ID

E. Peer Cisco TrustSec capability information