Proper study guides for Improve Cisco CCIE Pre-Qualification Test for Security certified begins with Cisco 350-018 preparation products which designed to deliver the Virtual 350-018 questions by making you pass the 350-018 test at your first time. Try the free 350-018 demo right now.
2021 Jan 350-018 lab:
Q41. class-map nbar_rtp
match protocol rtp payload-type "0, 1, 4 - 0x10, 10001b - 10010b, 64"
The above NBAR configuration matches RTP traffic with which payload types?
A. 0, 1, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13, 14, 15, 16, 17, 18, 64
B. 0, 1, 4, 5, 6, 7, 8, 9, 10
C. 0, 1, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13, 14, 15, 16, 17, 18, 19, 64
D. 0, 1, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13, 14, 64
Answer: A
Q42. Which C3PL configuration component is used to tune the inspection timers such as setting the tcp idle-time and tcp synwait-time on the Cisco ZBFW?
A. class-map type inspect
B. parameter-map type inspect
C. service-policy type inspect
D. policy-map type inspect tcp
E. inspect-map type tcp
Answer: B
Q43. A network administrator uses a LAN analyzer to troubleshoot OSPF router exchange messages sent to all OSPF routers. To which one of these MAC addresses are these messages sent?
A. 00-00-1C-EF-00-00
B. 01-00-5E-00-00-05
C. 01-00-5E-EF-00-00
D. EF-FF-FF-00-00-05
E. EF-00-00-FF-FF-FF
F. FF-FF-FF-FF-FF-FF
Answer: B
Q44. Identify three IPv6 extension headers? (Choose three.)
A. traffic class
B. flow.label
C. routing
D. fragment
E. encapsulating security.payload
Answer: CDE
Q45. Which statement describes the computed authentication data in the AH protocol?
A. The computed authentication data is never sent across.
B. The computed authentication data is part of a new IP header.
C. The computed authentication data is part of the AH header.
D. The computed authentication data is part of the original IP header.
Answer: C
Renovate download 350-018:
Q46. Which command is used to replicate HTTP connections from the Active to the Standby Cisco ASA appliance in failover?
A. monitor-interface http
B. failover link fover replicate http
C. failover replication http
D. interface fover replicate http standby
E. No command is needed, as this is the default behavior.
Answer: C
Q47. Which three statements are true about the transparent firewall mode in Cisco ASA? (Choose three.)
A. The firewall is not a routed hop.
B. The firewall can connect to the same Layer 3 network on its inside and outside interfaces.
C. Static routes are supported.
D. PAT and NAT are not supported.
E. Only one global address per device is supported for management.
F. SSL VPN is supported for management.
Answer: ABC
Q48. Which PKCS is invoked during IKE MM5 and MM6 when digital certificates are used as the authentication method?
A. PKCS#7
B. PKCS#10
C. PKCS#13
D. PKCS#11
E. PKCS#3
Answer: A
Q49. Refer to the exhibit.
Which statement is true?
A. This packet decoder is using relative TCP sequence numbering?.
B. This TCP client is proposing the use of TCP window scaling?.
C. This packet represents an active FTP data session?.
D. This packet contains no TCP payload.
Answer: D
Q50. Which two EIGRP packet types are considered to be unreliable packets? (Choose two.)
A. update
B. query
C. reply
D. hello
E. acknowledgement
Answer: DE