350-018試験無料問題集（875題）「Cisco CCIE Security Written Exam v4.0 認定」

出題：1

Which two of the following pieces of information are communicated by the ASA in version 8.4 or later when the
Stateful Failover is enabled? (Choose two.)

A. DHCP server address leases.

B. dynamic routing tables

C. user authentication

D. power status

E. NAT translation table

正解：B,E 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：2

Refer to the exhibit.

What is this configuration designed to prevent?

A. Dynamic payload inspection

B. DNS Inspection

C. Backdoor control channels for infected hosts

D. Man in the Middle Attacks

正解：C 解答を投票する

出題：3

Which three statements are true about the Cisco ASA object configuration below? (Choose three.)
object network vpnclients
range 10.1.100.4 10.1.100.10
object network vpnclients
nat (outside,outside) dynamic interface

A. Addresses in the range will be assigned during config-mode.

B. The NAT rule of this object will be placed in Section 1 (Auto-NAT) of the Cisco ASA NAT table?

C. The NAT configuration in the object specifies a PAT rule?

D. This configuration is most likely used to provide Internet access to connected VPN clients.

E. This configuration requires the command same-security-traffic inter-interface for traffic that matches this NAT rule
to pass through the Cisco ASA appliance.

正解：B,C,D 解答を投票する

出題：4

What mechanism does SSL use to provide confidentiality of user data?

A. symmetric encryption

B. asymmetric encryption

C. RSA public-key encryption

D. Diffie-Hellman exchange

正解：A 解答を投票する

出題：5

Which two statements about the IPv6 OSPFv3 authentication Trailer are true (choose two)

A. The AT-bit must be set only in OSPFv3 Database Description packets that include an Authentication Trailer

B. The AT-bit resides in the OSPFv3 Header field

C. It Provide an alternative option to OSPFv3 IPsec authentication

D. The IPv6 Payload length includes the length of the authentication Trailer

E. The OSPFv3 packet length includes the length of the Authentication Trailer

F. The AT-bit must be set only in OSPFv3 Hello packets that include an Authentication Trailer

正解：A,F 解答を投票する

出題：6

Which two statements describe GRE? (Choose two.)

A. Packet MTU must be adjusted to accommodate GRE overhead.

B. GRE provides data confidentiality.

C. GRE acts as a tunneling protocol and encapsulates other protocols.

D. The GRE tunnel interface remains down until it can see the remote tunnel end.

E. GRE does not allow multicast to be sent across the tunnel.

F. GRE acts as passenger protocol for a Layer 3 transport protocol.

正解：A,C 解答を投票する

出題：7

CCMP(CCM mode Protocol) is based on which algorithm?

A. 3DES

B. RCS

C. Blowfish

D. IDEA

E. AES

正解：E 解答を投票する

出題：8

Refer to the exhibit.

What is the meaning of the given error message?

A. IKE is disabled on the remote peer

B. The PFS groups are mismatched

C. The mirrored crypto ACLs are mismatched.

D. The pre-shared keys are mismatched

正解：D 解答を投票する

350-018試験無料問題集「Cisco CCIE Security Written Exam v4.0 認定」