Latest Cisco CCIE 350-018 Real Exam Download 21-30

EnsurepassQUESTION 21 DNSSEC was designed to overcome which security limitation of DNS?   A.      DNS man-in-the-middle attacks B.      DNS flood attacks C.      DNS fragmentation attacks D.      DNS hash attacks E.       DNS replay attacks F.       DNS violation attacks   Correct Answer: A     QUESTION 22 Which three statements are true about MACsec? (Choose three.)   A.      It supports GCM modes of AES and 3DES. B.      It is defined under IEEE 802.1AE. C.      Read more [...]

Latest Cisco CCIE 350-018 Real Exam Download 11-20

EnsurepassQUESTION 11 Which two address translation types can map a group of private addresses to a smaller group of public addresses? (Choose two.)   A.      static NAT B.      dynamic NAT C.      dynamic NAT with overloading D.      PAT E.       VAT   Correct Answer: CD     QUESTION 12 Which authentication mechanism is available to OSPFv3?   A.      simple passwords B.      MD5 C.      null D.      IKEv2 E.       IPsec AH/ESP   Correct Read more [...]

Latest Cisco CCIE 350-018 Real Exam Download 1-10

EnsurepassQUESTION 1 In order to reassemble IP fragments into a complete IP datagram, which three IP header fields are referenced by the receiver? (Choose three.)   A.      don't fragment flag B.      packet is fragmented flag C.      IP identification field D.      more fragment flag E.       number of fragments field F.       fragment offset field   Correct Answer: CDF     QUESTION 2 Which VTP mode allows the Cisco Catalyst switch administrator to make changes Read more [...]

2013 Latest 350-018 Pass4sure Free Tests 141-150

Ensurepass  QUESTION 141 Which three statements about LDAP are true? (Choose three.)   A.        LDAP uses UDP port 389 by default. B.        LDAP is defined in terms of ASN.1 and transmitted using BER. C.        LDAP is used for accessing X.500 directory services. D.        An LDAP directory entry is uniquely identified by its DN. E.         Read more [...]

2013 Latest 350-018 Pass4sure Free Tests 131-140

Ensurepass  QUESTION 131 Which multicast routing mechanism is optimal to support many-to-many multicast applications?   A.        PIM-SM B.        MOSPF C.        DVMRP D.       BIDIR-PIM E.        MSDP   Correct Answer: D     QUESTION 132 Which three statements regarding VLANs are true? (Choose three.) Read more [...]

2013 Latest 350-018 Pass4sure Free Tests 121-130

Ensurepass    QUESTION 121 Which two options best describe the authorization process as it relates to network access? (Choose two.)   A.        the process of identifying the validity of a certificate, and validating specific fields in the certificate against an identity store B.        the process of providing network access to the end user C.        applying enforcement controls, Read more [...]

2013 Latest 350-018 Pass4sure Free Tests 111-120

Ensurepass  QUESTION 111 What type of attack consists of injecting traffic that is marked with the DSCP value of EF into the network?   A.        brute-force attack B.        QoS marking attack C.        DHCP starvation attack D.        SYN flood attack   Correct Answer: B     QUESTION 112 Which statement is true regarding Cisco ASA operations Read more [...]

2013 Latest 350-018 Pass4sure Free Tests 101-110

Ensurepass  QUESTION 101 Which three nonproprietary EAP methods do not require the use of a client-side certificate for mutual authentication? (Choose three.)   A.        LEAP B.        EAP-TLS C.        PEAP D.        EAP-TTLS E.         EAP-FAST   Correct Answer: CDE     QUESTION 102 When you Read more [...]

2013 Latest 350-018 Pass4sure Free Tests 91-100

Ensurepass  QUESTION 91 Which three statements are true about PIM-SM operations? (Choose three.)   A.        PIM-SM supports RP configuration using static RP, Auto-RP, or BSR. B.        PIM-SM uses a shared tree that is rooted at the multicast source. C.        Different RPs can be configured for different multicast groups to increase RP scalability. D.        Read more [...]

2013 Latest 350-018 Pass4sure Free Tests 81-90

Ensurepass  QUESTION 81 Which of the following provides the features of route summarization, assignment of contiguous blocks of addresses, and combining routes for multiple classful networks into a single route?   A.        classless interdomain routing B.        route summarization C.        supernetting D.       private IP addressing   Correct Answer: Read more [...]

2013 Latest 350-018 Pass4sure Free Tests 71-80

Ensurepass  QUESTION 71 With the Cisco FlexVPN solution, which four VPN deployments are supported? (Choose four.)   A.        site-to-site IPsec tunnels? B.        dynamic spoke-to-spoke IPSec tunnels? (partial mesh) C.        remote access from software or hardware IPsec clients? D.       distributed full mesh IPsec tunnels? E.        Read more [...]

2013 Latest 350-018 Pass4sure Free Tests 61-70

Ensurepass  QUESTION 61 Refer to the exhibit. Which statement best describes the problem?     A.        Context vpn1 is not inservice. B.        There is no gateway that is configured under context vpn1. C.        The config has not been properly updated for context vpn1. D.        The gateway that is configured under context vpn1 is not inservice. Read more [...]

2013 Latest 350-018 Pass4sure Free Tests 51-60

Ensurepass  QUESTION 51 Troubleshooting the web authentication fallback feature on a Cisco Catalyst switch shows that clients with the 802.1X supplicant are able to authenticate, but clients without the supplicant are not able to use web authentication. Which configuration option will correct this issue?   A.        switch(config)# aaa accounting auth-proxy default start-stop group radius B.        switch(config-if)# Read more [...]

2013 Latest 350-018 Pass4sure Free Tests 41-50

Ensurepass  QUESTION 41 Which Cisco ASA feature can be used to update non-compliant antivirus/antispyware definition files on an AnyConnect client?   A.        dynamic access policies B.        dynamic access policies with Host Scan and advanced endpoint assessment C.        Cisco Secure Desktop D.        advanced endpoint assessment   Correct Read more [...]

2013 Latest 350-018 Pass4sure Free Tests 31-40

Ensurepass  QUESTION 31 Which three security features were introduced with the SNMPv3 protocol? (Choose three.)   A.        Message integrity, which ensures that a packet has not been tampered with in-transit B.        DoS prevention, which ensures that the device cannot be impacted by SNMP buffer overflow C.        Authentication, which ensures that the message is from a valid source Read more [...]

2013 Latest 350-018 Pass4sure Free Tests 21-30

Ensurepass  QUESTION 21 DNSSEC was designed to overcome which security limitation of DNS?   A.        DNS man-in-the-middle attacks B.        DNS flood attacks C.        DNS fragmentation attacks D.       DNS hash attacks E.        DNS replay attacks F.         DNS violation attacks Read more [...]

2013 Latest 350-018 Pass4sure Free Tests 11-20

Ensurepass  QUESTION 11 Which two address translation types can map a group of private addresses to a smaller group of public addresses? (Choose two.)   A.        static NAT B.        dynamic NAT C.        dynamic NAT with overloading D.        PAT E.         VAT   Correct Answer: CD     QUESTION Read more [...]

2013 Latest 350-018 Pass4sure Free Tests 1-10

EnsurepassQUESTION 1 In order to reassemble IP fragments into a complete IP datagram, which three IP header fields are referenced by the receiver? (Choose three.)   A.        don't fragment flag B.        packet is fragmented flag C.        IP identification field D.       more fragment flag E.        number of fragments field Read more [...]

2013 LATEST 350-001 PASS4SURE FREE TESTS 451-460

EnsurepassQUESTION 451 Which value is used in the PIM TYPE field to indicate a Join/Prune message?   A.        0 B.        1 C.        2 D.        3   Correct Answer: D     QUESTION 452 Which two multicast addresses are reserved for use by ALL-PIM-ROUTERS? (Choose two.)   A.       224.0.0.13 B.       Read more [...]

2013 LATEST 350-001 PASS4SURE FREE TESTS 441-450

Ensurepass  QUESTION 441 Which address needs to be present on an interface for OSPFv3 to form an adjacency?   A.       Global unicast B.       Unique local C.       Link local D.      FF02::5 E.       FF02::6   Correct Answer: C     QUESTION 442 Refer to the exhibit. Which statement is correct? A.       Read more [...]

2013 LATEST 350-001 PASS4SURE FREE TESTS 431-440

Ensurepass  QUESTION 431 Which three combinations are valid PAgP configurations that will set up a channel? (Choose three.)   A.       On-On B.       On-Auto C.       Passive-Active D.      Desirable-Auto E.       Active-Active F.        Desirable-Desirable   Correct Answer: ADF     QUESTION 432 Read more [...]

2013 LATEST 350-001 PASS4SURE FREE TESTS 421-430

Ensurepass  QUESTION 421 Which two statements are true about LACP? (Choose two.)   A.       LACP packets are sent with multicast group MAC address 01-80-c2-00-00-02. B.       The Type/Field value is 0x8808. C.       During detection, LACP packets are transmitted every second. D.      The timeout for a failed LACP channel is 30 seconds by default.   Correct Answer: AC   Read more [...]

2013 LATEST 350-001 PASS4SURE FREE TESTS 411-420

Ensurepass  QUESTION 411 Which value should be used in the configuration register of a router in order to boot into bootstrap?   A.       0x2102 B.       0x2142 C.       0x2124 D.      0x2101   Correct Answer: D     QUESTION 412 Refer to the exhibit.   R1 has two eBGP sessions to ISP1 and ISP2 (one to each ISP router), and R1 receives the same prefixes Read more [...]

2013 LATEST 350-001 PASS4SURE FREE TESTS 401-410

Ensurepass  QUESTION 401 Which statement is true of a source that wants to transmit multicast traffic to group 239.1.1.1?   A.       Before sending traffic, it must first join multicast group 239.1.1.1 by sending an IGMPv2 membership report to the default router on the local subnet. B.       It must send an IGMPv2 Request to Send packet and then wait for an IGMPv2 Clear to Send packet from the IGMPv2 querier router on the local Read more [...]

2013 LATEST 350-001 PASS4SURE FREE TESTS 391-400

Ensurepass  QUESTION 391 This question is about the formation of OSPF adjacency. An OSPF adjacency will not form correctly across a point-to-point link in the same area. Which would most likely cause this problem?   A.       Each interface has a different OSPF cost. B.       Each interface is configured with secondary addresses as well as primary addresses. C.       Each interface has a different MTU Read more [...]

2013 LATEST 350-001 PASS4SURE FREE TESTS 381-390

Ensurepass  QUESTION 381 You are a network technician, study the exhibit carefully. In this EIGRP network, the output of the command show interface for the link between R2 and R5 indicates that the link load varies between 10 and 35. Which K value setting will be used to make sure that this link is not used by EIGRP when the link load reaches 35, but can be used again when the link load drops below 20?   A.  Link load is not read in real time, so there is no way to set the K values Read more [...]

2013 LATEST 350-001 PASS4SURE FREE TESTS 371-380

Ensurepass  QUESTION 371 Which two steps below should you perform on the hub router while configuring EIGRP routing over DMVPN (mGRE tunnel)? (Choose two.)   A.       Set the NHRP hold time to match the EIGRP hold time B.       Add the enable eigrp stub command C.       Add the disable eigrp as-member split-horizon command D.      Add the disable eigrp as-member next-hop-self Read more [...]

2013 LATEST 350-001 PASS4SURE FREE TESTS 361-370

Ensurepass  QUESTION 361 Internet Protocol version 6 (IPv6) is the next-generation Internet Layer protocol for packet- switched internetworks and the Internet. IPv6 router solicitation is:   A.       A request made by a node for the IP address of the local router B.       A request made by a node to join a specified multicast group C.       A request made by a node for a DHCP provided IP address D.      Read more [...]

2013 LATEST 350-001 PASS4SURE FREE TESTS 351-360

Ensurepass  QUESTION 351 Which three statements are true about Source Specific Multicast? (Choose three.)   A.       Is best suited for applications that are in the one-to-many category. B.       SSM uses shortest path trees only. C.       The use of SSM is recommended when there are many sources and it is desirable to keep the amount of mroute state in the routers in the network to a D.      Read more [...]

2013 LATEST 350-001 PASS4SURE FREE TESTS 341-350

Ensurepass  QUESTION 341 What are the mandatory, well-known BGP attributes?   A.       origin, AS-path, next-hop B.       AS-path, origin, MED C.       AS-path, origin, weight D.      AS-path, weight, MED   Correct Answer: A     QUESTION 342 Network A has a spanning-tree problem in which the traffic is selecting a longer path. How is the path cost calculated? Read more [...]