350-018v4 Exam Training Practice Tests (Cisco CCIE Security Exam (4.0))]

Question 1

In an 802.11 WLAN, which option is the Layer 2 identifier of a basic service set, and also is typically the MAC address
of the radio of the access point?

A. MBSSID B. BSSID C. VBSSID D. SSID

Correct Answer: B

Question 2

Which two statements about SOX are true? (Choose two.)

A. SOX is a private organization that provides best practices for financial institution computer systems. B. SOX is a US law. C. Section 404 of SOX is related to IT compliance. D. SOX is an IEEE compliance procedure for IT management to produce audit reports. E. SOX is an IEFT compliance procedure for computer systems security.

Correct Answer: B,C

Question 3

Which statement about Cisco IPS signatures is true?

A. Once the signature is removed from the sensing engine it cannot be restored. B. All of the built-in signatures are enabled by default. C. Tuned signatures are built-in signatures whose parameters cannot be adjusted. D. It is recommended to retire a signature not being used to enhance the sensor performance.

Correct Answer: D

Question 4

Refer to the exhibit.

Which statement about the configuration commands is true?

A. By default, the switch attempts MAB and then Dot1x. B. These are valid configuration commands and the switch accepts them. C. These commands return an error because of a mismatch between the Dot1x order and priority. D. Changing the default order of authentication does not introduce additional authentication traffic in the network.

Correct Answer: B

Explanation: Only visible for TrainingDump members. You can sign-up / login (it's free).

Question 5

What is the function of this command?
switch(config-if)# switchport port-security mac-address sticky

A. It allows the switch to dynamically learn the MAC addresses on the switch port, and the MAC addresses will be
added to the running configuration B. It allows the administrator to manually configure the secured MAC addresses on the switch port. C. It allows the switch to perform sticky learning, in which the dynamically learned MAC addresses are copied from
the MAC address table (CAM table) to the startup configuration. D. It allows the switch to restrict the MAC addresses on the switch port, based on the static MAC addresses configured
in the startup configuration. E. It allows the switch to permanently store the secured MAC addresses in the MAC address table (CAM table).

Correct Answer: A

Question 6

When configuring an Infrastructure ACL (iACL) to protect the IPv6 infrastructure of an enterprise network, where
should the iACL be applied??

A. all infrastructure devices in both the inbound and outbound direction B. all parameter devices in both the inbound and outbound direction C. all parameter devices in the inbound direction D. all parameter devices in the outbound direction E. all infrastructure devices in the inbound direction F. all infrastructure devices in the outbound direction

Correct Answer: C

Question 7

During the establishment of an Easy VPN tunnel, when is XAUTH performed?

A. at the end of IKEv1 Phase 2 B. at the beginning of IKEv1 Phase 1 C. at the end of Phase 1 and before Phase 2 starts in IKEv1 D. at the end of Phase 1 and before Phase 2 starts in IKEv1 and IKEv2

Correct Answer: C

Question 8

Which three statements are true regarding RFC 5176 (Change of Authorization)? (Choose three.)

A. It defines a mechanism to allow a RADIUS server to initiate a communication inbound to a NAD. B. It defines a wide variety of authorization actions, including "reauthenticate." C. It defines the format for a Change of Authorization packet. D. It specifies that TCP port 3799 be used for transport of Change of Authorization packets. E. It defines a DM.

Correct Answer: A,C,E

Question 9

Which two statements about the multiple context mode running Version 9.x are true? (Choose two.)

A. An interface cannot be shared by multiple contexts. B. RIP is not supported. C. Site-To-Site VPN feature is supported D. Only the admin and context configuration files are supported. E. Remote access VPN is supported. F. OSPFv3 is supported. G. Multicast feature is supported

Correct Answer: B,C

Question 10

What protocol format is illustrated?
Refer to the exhibit.

A. AH B. ESP C. IP D. GRE

Correct Answer: A

Explanation: Only visible for TrainingDump members. You can sign-up / login (it's free).

Question 11

What is the recommended network MACSec policy mode for high security deployments?

A. monitor-only B. must-not-secure C. should-secure D. high-impact E. must-secure

Correct Answer: E

Question 12

Refer to the exhibit.

Which services or feature must be enabled on 209.165.200.225 to produce the given output?

A. a TCP small server B. the PAD service C. the Finger Service D. a BOOTP server

Correct Answer: A

Question 13

Which Cisco IPS appliance signature engine defines events that occur in a related manner, within a sliding time
interval, as components of a combined signature?

A. Sweep engine B. Service engine C. Meta engine D. Multistring engine

Correct Answer: C

Cisco CCIE Security Exam (4.0) - 350-018v4 Exam Practice Test