Cisco CCIE Security Exam (4.0) - 350-018v4 Exam Practice Test

A. The static CLI command is used to configure static NAT translation rules.

B. The interface and global access lists both can be applied in the input or output direction.

C. NAT control is enabled by default.

D. The interface access list is matched first before the global access lists.

A. key length incompatibility

B. certification path invalidity

C. CA key compromise

D. validity expiration

E. cessation of operation

A. a security policy

B. an Incident Response Team

C. Network access control

D. a Security Operations Center

E. Firewalls

A. NMS sends request to the agent from any source port.

B. SNMP operates at Layer-6 of the OSI model.

C. MIB is a hierarchical representation of management data on NMS.

D. NMS receives notifications from the agent on UDP 162.

E. NMS sends a request to the agent at TCP port 161.

A. It can only be used for failover links.

B. It is a logical interface that combines two physical interfaces, both of which are active.

C. By default, the first physical interface that is configured in the pair is the active interface.

D. The redundant interface uses the MAC address of the second physical interface in the pair.

A. 2

B. 255

C. 5

D. 3

E. 254

F. 252

A. HTTP downloads of files with the ".bat" extension on all interfaces

B. FTP commands of GET or PUT for files with the ".bat" extension on all interfaces

C. FTP commands of GET or PUT for files with the ".batch" extension on the inside interface

D. HTTP downloads of files with the ".batch" extension on the inside interface

A. If any client causes a security violation, the port is immediately placed in spanning-tree disabled mode.

B. If a client is authenticated and the port security table is full, the oldest client is aged out.

C. 802.1x manages network access for all authorized MAC addresses.

D. An entry is created in the secure host table for any client that is authenticated and manually configured for port
security, even if the table is full.

E. If any host causes a security violation, the port is immediately error-disabled.

A. The client cannot request its last IP address; it is assigned automatically by the server.

B. It is included in the CIADDR field.

C. It is included in the YIADDR field.

D. It is included as DHCP Option 50 in the OPTIONS field.

E. It is the source IP address of the UDP/53 wrapper packet.

A. 10.1.2.0/22

B. 10.1.0.0/21

C. 10.1.0.0/22

D. 10.1.0.0/16

A. It is an IEFT compliance procedure for computer systems security.

B. Section 404 of SOX is related to non IT compliance.

C. It is an IEEE compliance procedure for IT management to produce audit reports.

D. It is a US law.

E. It is a private organization that provides best practices for financial institution computer systems.