Cisco CCIE Security Written Exam v4.0 - 350-018 FREE EXAM DUMPS QUESTIONS & ANSWERS

A. SNMP Trap (SNMP Trap Probe) B. RADIUS (RADIUS Probe) C. DNS (DNS Probe) D. NetFlow (NetFlow Probe) E. HTTP SPAN (HTTP SPAN Probe) F. DHCP SPAN (DHCP SPAN Probe) G. HTTP (HTTP Probe) H. SNMP Query (SNMP Query Probe) I. Network Scan (Network Scan Probe) J. DHCP (DHCP Probe)

A. It is classified by copying and sending the packet to all the contexts. B. It is classified using the destination address of the packet using the connection table. C. It is classified using the destination address of the packet using the NAT table. D. It is classified using the destination MAC address of the packet. E. it is classified using the destination address of the packet using the routing table.

A. The pre-shared keys are mismatched B. The PFS groups are mismatched C. IKES disabled on the remote peer D. The mirrored crypto ACLs are mismatched

A. INITIAL_CONTACT is used to synchronize state between peers. B. NAT-T is not supported. C. Attribute policy push (via the configuration payload) is only supported in REQUEST/REPLY mode. D. Rekeying IKE and child SAs is facilitated by the IKEv2 CREATE_CHILD_SA exchange. E. The IKEv2 standard defines a method for fragmenting large messages. F. The initial exchanges of IKEv2 consist of IKE_SA_INIT and IKE_AUTH.

A. By default, the IP packets that need encryption are first encrypted with ESP. If the resulting encrypted packet
exceeds the IP MTU on the egress physical interface, then the encrypted packet is fragmented and sent out. B. increases CPU utilization on the decrypting device. C. By default, the router knows the IPsec overhead to add to the packet. The router performs a lookup if the packet
will exceed the egress physical interface IP MTU after encryption, then fragments the packet and encrypts the
resulting IP fragments separately. D. increases CPU utilization on the encrypting device.

A. Echo-Time Exceeded B. Route Solicitation- Time Exceeded C. Echo-Echo Request D. Echo Reply-Host Unreachable E. Echo-Host Unreachable

A. IP to SGT binding information B. ingress switch to SGT binding information C. MAC to SGT binding information D. ingress port to SGT binding information

A. 172.16.0.0/12 B. 171.10.0.0/24 C. 192.80.90.0/24 D. 203.0.113.0/24 E. 198.50.100.0/24 F. 0.0.0.0/8

A. It supports a block size of 128, 192, or 256 bits. B. It supports a variable length block size from 16 to 448 bits. C. It is a FIPS-approved symmetric block cipher. D. It supports a cipher key size of 128, 192, or 256 bits. E. The AES encryption algorithm is based on the presumed difficulty of factoring large integers.

A. It store per-DNS broadcast information in radius accounting records. B. It is best deployed at the access layer, close to the switch port C. It works in conjunction with 802.11 wireless technologies D. the distribution and core layers in the network can be segregated E. Each endpoint's MACsec policy is define by the authentication server.

A. Define a hash algorithm that is used to generate the CGA. B. Generate the CGA modifier. C. Assign a CGA link-local or globally unique address to the interface. D. Define an encryption algorithm that is used to generate the CGA. E. Generate an RSA key pair. F. Define a site-wide pre-shared key.