Free 350-018 Questions for Cisco 350-018 Exam

Question #1

Which of the following best describes Chain of Evidence in the context of security forensics?

A. The general whereabouts of evidence is known.

B. Someone knows where the evidence is and can say who had it if it is not logged.

C. Evidence is locked down, but not necessarily authenticated.

D. Evidence is controlled and accounted for to maintain its authenticity and integrity.

Discussion 0

Correct Answer: D Vote an answer

Question #2

Which three statements regarding ISO 27002 and COBIT are correct? (Choose three.)

A. COBIT focuses on information system processes, whereas ISO 27002 focuses on the security of the information
systems.

B. ISO 27002 addresses control objectives, whereas COBIT addresses information security management process
requirements.

C. COBIT and ISO 27002 both define a best practices framework for IT controls.

D. Compared to COBIT, ISO 27002 covers a broader area in planning, operations, delivery, support, maintenance, and
IT governance.

E. Unlike COBIT, ISO 27002 is used mainly by the IT audit community to demonstrate risk mitigation and avoidance
mechanisms.

Discussion 0

Correct Answer: A,B,C Vote an answer

Question #3

Which statement correctly describes a botnet filter category?

A. Known malware addresses: These addresses are identified as blacklist addresses in the dynamic database and static
list.

B. Ambiguous addresses: In this case, the same domain name has multiple malware addresses but not all the
addresses are in the dynamic database. These addresses are on the graylist.

C. Known allowed addresses: These addresses are identified as whitelist addresses that are bad addresses but still
allowed.

D. Unlisted addresses: The addresses are malware addresses that are not identified by the dynamic database and are
hence defined statically.

Discussion 0

Correct Answer: A Vote an answer

Question #4

Refer to the exhibit.

What is the effect of the given ACL Policy?

A. The policy will deny all ipv6 eBGP session

B. The policy will disable ipv6 source routing

C. The policy will deny all ipv6 routing packet

D. The policy will deny all ipv6 routed packets

Discussion 0

Correct Answer: B Vote an answer

Question #5

Refer to the exhibit.

Which two statements about the effects of the given Cisco IOS configuration are true? (Choose two.)

A. The half-open session timeout is 20 minutes

B. The idle timeout for UDP connections is 20 minutes.

C. The maximum number of half-open sessions is 400.

D. The maximum number of half-open sessions is 600

E. The software will delete half-open sessions if more than 600 new sessions are established per minute.

Discussion 0

Correct Answer: C,E Vote an answer

Explanation: Only visible for ExamDiscuss members. You can sign-up / login (it's free).

Question #6

Refer to the exhibit.

Which option correctly identifies the point on the exhibit where Control Plane Policing (input) is applied to incoming
packets?

A. points 5 and 6

B. point 7

C. point 1

D. point 4

E. point 6

Discussion 0

Correct Answer: E Vote an answer

Question #7

Which three basic security measures are used to harden MSDP? (Choose three.)

A. MSDP SA filters

B. MSDP MD5 neighbor authentication

C. MSDP neighbor limitation

D. MSDP state limitation

E. loopback interface as MSDP originator-ID

Discussion 0

Correct Answer: A,B,D Vote an answer

Question #8

If an ASA device is configured as a remote access IPsec server with RADIUS authentication and password management
enabled, which type of authentication will it use?

A. MS-CHAPv1

B. RSA

C. PAP

D. NTLM

E. MS-CHAFV2

Discussion 0

Correct Answer: C Vote an answer

Explanation: Only visible for ExamDiscuss members. You can sign-up / login (it's free).

Question #9

Which three statements about the RSA algorithm are true to provide data confidentiality? (Choose three.)

A. The private key is used to decrypt the message that was encrypted by the public key.

B. The public key is used to decrypt the message that was encrypted by the private key.

C. The RSA algorithm provides encryption and authentication.

D. The RSA algorithm creates a pair of public-private keys and the public key is shared to perform encryption.

E. The RSA algorithm provides authentication but not encryption.

F. The private key is never shared after it is generated.

Discussion 0

Correct Answer: A,D,F Vote an answer

Question #10

For which two reasons BVI is required in the Transparent Cisco IOS Firewall? (Choose two)

A. BVI is required if routing is disabled on the firewall.

B. BVI is required for the inspection of IP traffic.

C. BVI is required if more than two interfaces are in a bridge group.

D. BVI can manage the device without having an interface that is configured for routing.

E. BVI is required for the inspection of non-IP traffic.

F. The firewall can perform routing on bridged interfaces.

Discussion 0

Correct Answer: C,D Vote an answer

Question #11

Refer to the exhibit.

Which statement about R1 is true?

A. Its NVRAM contains public and private crypto keys

B. Its private-config is corrupt

C. Its running configuration is missing

D. RMON is configured

Discussion 0

Correct Answer: A Vote an answer

Question #12

Refer to the exhibit.

A customer has an IPsec tunnel that is configured between two remote offices. The customer is seeing these syslog
messages on Router B:
% CRYPTO-4-PKT_REPLAY_ERR: decrypt: replay check failed connection id=x, sequence number=y
What is the most likely cause of this error?

A. The customer has an LLQ QoS policy that is configured on the WAN interface of Router

B. A hacker on the Internet is launching a spoofing attack.

C. Router A and Router B are not synchronized to the same timer source.

D. There is packet corruption in the network between Router A and Router B.

E. Router B has an incorrectly configured IP MTU value on the WAN interface.

Discussion 0

Correct Answer: A Vote an answer

Question #13

Which three statements are true about the transparent firewall mode in Cisco ASA? (Choose three.)

A. Only one global address per device is supported for management.

B. PAT and NAT are not supported.

C. The firewall is not a routed hop.

D. Static routes are supported.

E. The firewall can connect to the same Layer 3 network on its inside and outside interfaces.

F. SSL VPN is supported for management.

Discussion 0

Correct Answer: C,D,E Vote an answer

Free 350-018 Questions for Cisco CCIE Security Written Exam v4.0 350-018 Exam as PDF & Practice Test Engine

Download Free Cisco 350-018 Demo