Cisco CCIE Security Exam (4.0) - 350-018v4 FREE EXAM DUMPS QUESTIONS & ANSWERS

A. RC4 B. RC5 C. Blowfish D. DES

A. RADIUS protocol runs over UDP 1812 and 1813. B. Network Access Server operates as a server for RADIUS. C. RADIUS protocol runs over TCP 1645 and 1646. D. RADIUS packet types for authentication include Access-Request, Access-Challenge, Access-Permit, and Access-
Denied. E. RADIUS packet types for authentication include Access-Request, Access-Challenge, Access-Accept, and Access-
Reject. F. RADIUS supports PPP, PAP, and CHAP as authentication methods.

A. applications that require double encryption B. applications that are unable to use TLS C. delay-sensitive applications, such as voice or video D. point-to-multipoint topology applications

A. SSH B. TLS C. Telnet D. AES

A. TCP intercept B. CAR applied to ICMP packets C. a null zero route D. the ip verify unicast reverse-path command

A. In multiple context mode, all contexts need to be in transparent mode. B. IP traffic will not pass unless it is permitted by an access-list. C. Transparent mose acts as a Layer-3 firewall. D. The inside and outside interface must be in a different subnet. E. ARP traffic is dropped unless it is permitted. F. A configured route applies only to the traffic that is originated by the ASA.

A. IPsec phase-2 policy mismatch B. incorrect tunnel source interface on R1 C. tunnel mode mismatch D. IPsec phase-1 policy mismatch E. IPsec phase-1 configuration missing peer address on R2

A. Mobile nodes and the home agents must support ESP in transport mode with non-NULL payload authentication. B. The use of IKEv1 or IKEv2 is mandatory for connections between the home agent and mobile node. C. IPsec SAs are used for binding updates and acknowledgements. D. Mobile IPv6 control messages are protected by SHA-2. E. IPsec SAs are used to protect dynamic home agent address discovery. F. IPsec SAs can be used to protect mobile prefix solicitations and advertisements.

A. 001/3 B. 000/3 C. 011/2 D. 010/2

A. For the packet that has been received on the egress interface, transaction rule is checked before the ACL if the
connection entry does not exist for the packet flow. B. For the packet that has been received on the ingress interface, transaction rule is checked before the ACL if the
connection entry for the packet flow does not exist. C. For the packet that has been received on the ingress interface, ACL is only checked if the connection entry exists for
the packet flow. D. For the packet that has been received on the ingress interface, ACL is only checked if the connection entry does not
exist for the packet flow.

A. high-impact B. monitor-only C. should-secure D. must-secure E. must-not-secure

A. TACACS+ supports per-user or per-group for authorization of router commands. B. TACACS+ only encrypts the password of the user for security. C. TACACS+ uses TCP port 47 by default. D. TACACS+ is considered to be more secure than the RADIUS protocol. E. TACACS+ is an IETF standard protocol. F. TACACS+ can support authorization and accounting while having another separate authentication solution.

A. 1 to 4,294,967,295 B. 0 to 4,294,967,295 C. 0 to 1024 D. 1 to 65535 E. 1 to 1024 F. 0 to 65535

A. Cache timeout inactive 60 B. Cache timeout active 60 C. Next-hop address D. Source Loopback0

A. string TCP B. ATOMIC IP C. service HTTP D. AIC HTTP