最新的Cisco 350-018v4免費考試真題

問題1

Which three statements about RLDP are true? (Choose three)

A. It can detect rogue APs that use WEP encryption

B. It can detect rogue APs operating only on 5 GHz

C. Active Rogue Containment can be initiated manually against rogue devices detected on the wired network

D. The AP is unable to serve clients while the RLDP process is active

E. It can detect rogue Aps that use WPA encryption

F. It detects rogue access points that are connected to the wired network

正確答案: C,F

問題2

In ISO 27001 ISMS, which three of these certification process phases are required to collect information for ISO
27001? (Choose three.)

A. observation

B. major compliance

C. post-audit

D. pre-audit

E. discover

F. certification audit

正確答案: C,D,F

問題3

Event Action Rule is a component of which IPS application?

A. SensorDefinition

B. AuthenticationApp

C. InterfaceApp

D. MainApp

E. NotificationApp

F. SensorApp

正確答案: F

問題4

What feature on the Cisco ASA is used to check for the presence of an up-to-date antivirus vendor on an AnyConnect
client?

A. Dynamic Access Policies with no additional options

B. advanced endpoint assessment

C. LDAP attribute maps obtained from Antivirus vendor

D. Dynamic Access Policies with Host Scan enabled

正確答案: D

問題5

Refer to the exhibit.

You executed the show crypto key mypubkey rsa command to verify that the RSA key is protected and it generated the
given output. What command must you have entered to protect the key?

A. crypto key zeroize rsa CiscoPKI

B. crypto key import rsa pki.cisco.com pem url nvram: CiscoPKI

C. crypto key export rsa pki.cisco.com pem url flash: 3des CiscoPKI

D. crypto key decrypt rsa name pki.cisco.com passphrase CiscoPKI

E. crypto key lock rsa name pki.cisco.com passphrase CiscoPKI

正確答案: E

問題6

What two statements about the PCoIP protocol are true? (Choose two.)

A. It uses a variety of codecs to support different operating systems.

B. It supports both lossy and lossless compression.

C. It is a TCP-based protocol

D. It is a client-rendered, multi-codec protocol.

E. It is available in both software and hardware.

正確答案: B,E

問題7

What is the range of valid stratum numbers for NTP when configuring a Cisco IOS device as an authoritative NTP
server?

A. 0 to 4

B. 1 to 16

C. 1 to 15

D. 0 to 16

正確答案: C

說明：（僅 Fast2test 成員可見）

問題8

Which VPN technology is based on GDOI (RFC 3547)?

A. MPLS Layer 3 VPN

B. MPLS Layer 2 VPN

C. IPsec VPN

D. GET VPN

正確答案: D

問題9

Which three statements correctly describe the purpose and operation of IPv6 RS and RA messages? (Choose three.)

A. RS and RA packets are used by the duplicate address detection function of IPv6.

B. RS and RA packets are always sent to an all-nodes multicast address.

C. IPv6 RA messages can help host devices perform stateful or stateless address autoconfiguration; RS messages are
sent by hosts to determine the addresses of routers.

D. IPv6 hosts learn connected router information from RA messages which may be sent in response to an RS message.

E. RS and RA packets are used for IPv6 nodes to perform address resolution that is similar to ARP in IPv4.

F. Both IPv6 RS and RA packets are ICMPv6 messages.

正確答案: C,D,F

問題10

What technique can an attacker use to obfuscate a malware application payload, allowing it to bypass standard
security mechanisms?

A. Teredo tunneling

B. steganography

C. a PE32 header

D. BASE64

E. decryption

正確答案: B

說明：（僅 Fast2test 成員可見）

最新的Cisco CCIE Security Exam (4.0) - 350-018v4免費考試真題

聯系我們

站內鏈接

最新更新