Passed Cisco 350-018 Exam with Pass4sure and Lead2pass PDF & VCE (31-40)

QUESTION 31
Refer to the exhibit. Which statement about this Cisco Catalyst switch 802.1X configuration is true?

A.    If an IP phone behind the switch port has an 802.1X supplicant, MAC address bypass will still be
used to authenticate the IP Phone.
B.    If an IP phone behind the switch port has an 802.1X supplicant, 802.1X authentication will be used
to authenticate the IP phone.
C.    The authentication host-mode multi-domain command enables the PC connected behind the IP
phone to bypass 802.1X authentication.
D.    Using the authentication host-mode multi-domain command will allow up to eight PCs connected
behind the IP phone via a hub to be individually authentication using 802.1X.

Answer: B

QUESTION 32
Which signature engine is used to create a custom IPS signature on a Cisco IPS appliance that triggers when a vulnerable web application identified by the “/runscript.php” URI is run?

A.    AIC HTTP
B.    Service HTTP
C.    String TCP
D.    Atomic IP
E.    META
F.    Multi-String

Answer: B

QUESTION 33
With the Cisco FlexVPN solution, which four VPN deployments are supported? (Choose four.)

A.    site-to-site IPsec tunnels?
B.    dynamic spoke-to-spoke IPSec tunnels? (partial mesh)
C.    remote access from software or hardware IPsec clients?
D.    distributed full mesh IPsec tunnels?
E.    IPsec group encryption using GDOI?
F.    hub-and-spoke IPsec tunnels?

Answer: ABCF

QUESTION 34
Which four techniques can you use for IP management plane security? (Choose four.)

A.    Management Plane Protection
B.    uRPF
C.    strong passwords
D.    RBAC
E.    SNMP security measures
F.    MD5 authentication

Answer: ACDE

QUESTION 35
Which three statements about remotely triggered black hole filtering are true? (Choose three.)

A.    It filters undesirable traffic.
B.    It uses BGP or OSPF to trigger a network-wide remotely controlled response to attacks.
C.    It provides a rapid-response technique that can be used in handling security-related events
and incidents.
D.    It requires uRPF.

Answer: ACD

QUESTION 36
Which three statements about Cisco Flexible NetFlow are true? (Choose three.)

A.    The packet information used to create flows is not configurable by the user.
B.    It supports IPv4 and IPv6 packet fields.
C.    It tracks all fields of an IPv4 header as well as sections of the data payload.
D.    It uses two types of flow cache, normal and permanent.
E.    It can be a useful tool in monitoring the network for attacks.

Answer: BCE

QUESTION 37
During a computer security forensic investigation, a laptop computer is retrieved that requires
content analysis and information retrieval. Which file system is on it, assuming it has the default installation of Microsoft Windows Vista operating system?

A.    HSFS
B.    WinFS
C.    NTFS
D.    FAT
E.    FAT32

Answer: C

QUESTION 38
Which three statements about the IANA are true? (Choose three.)

A.    IANA is a department that is operated by the IETF.
B.    IANA oversees global IP address allocation.
C.    IANA managed the root zone in the DNS.
D.    IANA is administered by the ICANN.
E.    IANA defines URI schemes for use on the Internet.

Answer: BCD

QUESTION 39
What does the Common Criteria (CC) standard define?

A.    The current list of Common Vulnerabilities and Exposures (CVEs)
B.    The U.S standards for encryption export regulations
C.    Tools to support the development of pivotal, forward-looking information system technologies
D.    The international standards for evaluating trust in information systems and products
E.    The international standards for privacy laws
F.    The standards for establishing a security incident response system

Answer: D

QUESTION 40
Which three types of information could be used during the incident response investigation phase? (Choose three.)

A.    netflow data
B.    SNMP alerts
C.    encryption policy
D.    syslog output
E.    IT compliance reports

Answer: ABD

If you want to pass Cisco 350-018 successfully, donot missing to read latest lead2pass Cisco 350-018 dumps.
If you can master all lead2pass questions you will able to pass 100% guaranteed.

http://www.lead2pass.com/350-018.html

Why Choose Lead2pass?