350-018 Exam Details

  • Exam Code
    :350-018
  • Exam Name
    :CCIE Security written
  • Certification
    :Cisco Certifications
  • Vendor
    :Cisco
  • Total Questions
    :872 Q&As
  • Last Updated
    :Dec 11, 2021

Cisco 350-018 Online Questions & Answers

  • Question 101:

    Which three statements are correct when comparing Mobile IPv6 and Mobile IPv4 support? (Choose three.)

    A. Mobile IPv6 does not require a foreign agent, but Mobile IPv4 does.
    B. Mobile IPv6 supports route optimization as a fundamental part of the protocol; IPv4 requires extensions.
    C. Mobile IPv6 and Mobile IPv4 use a directed broadcast approach for home agent address discovery.
    D. Mobile IPv6 makes use of its own routing header; Mobile IPv4 uses only IP encapsulation.
    E. Mobile IPv6 and Mobile IPv4 use ARP for neighbor discovery.
    F. Mobile IPv4 has adopted the use of IPv6 ND.

  • Question 102:

    Which as-path access-list regular expression should be applied on R2 as a neighbor filter list to only allow updates with an origin of AS 65503?

    Refer to the exhibit.

    A. _65503.?$
    B. ^65503 .*
    C. 65503
    D. _65503_
    E. _65503$
    F. ^65503$

  • Question 103:

    In order to implement CGA on a Cisco IOS router for SeND, which three configuration steps are required? (Choose three.)

    A. Generate an RSA key pair.
    B. Define a site-wide pre-shared key.
    C. Define a hash algorithm that is used to generate the CGA.
    D. Generate the CGA modifier.
    E. Assign a CGA link-local or globally unique address to the interface.
    F. Define an encryption algorithm that is used to generate the CGA.

  • Question 104:

    An IPv6 multicast receiver joins an IPv6 multicast group using which mechanism?

    A. IGMPv3 report
    B. IGMPv3 join
    C. MLD report
    D. general query
    E. PIM join

  • Question 105:

    Drag each IPSec term on the left to the definition on the right.

    Select and Place:

  • Question 106:

    What are the three response types for SCEP enrollment requests? (Choose three.)

    A. PKCS#7
    B. B. Reject
    C. C. Pending
    D. D. PKCS#10
    E. E. Success
    F. F. Renewal

  • Question 107:

    What message does the TACACS+ daemon send during the AAA authentication process to request additional authentication information?

    A. ACCEPT
    B. CONTINUE
    C. REJECT
    D. ERROR
    E. REPLY

  • Question 108:

    Which four attributes are identified in an X.509v3 basic certificate field? (Choose four.)

    A. key usage
    B. certificate serial number
    C. issuer
    D. subject name
    E. signature algorithm identifier
    F. CRL distribution points
    G. subject alt name

  • Question 109:

    Which two VLSM subnets, when taken as a pair, overlap? (Choose two.)

    A. 10.22.21.128/26
    B. 10.22.22.128/26
    C. 10.22.22.0/27
    D. 10.22.20.0/23
    E. 10.22.16.0/22

  • Question 110:

    Which statement is true about EAP-FAST?

    A. It supports Windows single sign-on.
    B. It is a proprietary protocol.
    C. It requires a certificate only on the server side.
    D. It does not support an LDAP database.

Tips on How to Prepare for the Exams

Nowadays, the certification exams become more and more important and required by more and more enterprises when applying for a job. But how to prepare for the exam effectively? How to prepare for the exam in a short time with less efforts? How to get a ideal result and how to find the most reliable resources? Here on Vcedump.com, you will find all the answers. Vcedump.com provide not only Cisco exam questions, answers and explanations but also complete assistance on your exam preparation and certification application. If you are confused on your 350-018 exam preparations and Cisco certification application, do not hesitate to visit our Vcedump.com to find your solutions here.