Free Cisco 350-018 Practice Test & Real Exam Questions

Exam Code/Number: 350-018
Exam Name/Title: CCIE Security Written Exam v4.0
Certification Provider: Cisco
Corresponding Certification: CCIE

Exam Questions: 875
Updated On: Aug 11, 2026

Question #12

What are two authentication algorithms supported with SNMPv3 on an ASA? (Choose two.)

A. RC5

B. 3DES

C. RC4

D. MD5

E. SHA

F. DES

Discussion 0

Correct Answer: D,E Vote an answer

Explanation: Only visible for Pass4Leader members. You can sign-up / login (it's free).

Question #13

Which three statements describe the security weaknesses of WEP? (Choose three.)

A. Key strength is weak and non-standardized.

B. There is no key distribution mechanism.

C. Its key rotation mechanism is too predictable.

D. The WEP ICV algorithm is not optimal for cryptographic integrity checking.

E. For integrity, it uses MD5, which has known weaknesses.

Discussion 0

Correct Answer: A,B,D Vote an answer

Question #14

Of which IPS application is Event Store a component?

A. AuthenticationApp

B. NotificationApp

C. SensorApp

D. InterfaceApp

E. MainApp

Discussion 0

Correct Answer: E Vote an answer

Explanation: Only visible for Pass4Leader members. You can sign-up / login (it's free).

Question #15

Which three configuration tasks are required for VPN clustering of AnyConnect clients that are connecting to an FQDN
on the Cisco ASA?? (Choose three.)

A. The remote-access IP pools must be configured the same on each VPN cluster-member interface.

B. The redirect-fqdn command must be entered under the vpn load-balancing sub-configuration.

C. Each ASA in the VPN cluster must be able to resolve the IP of all DNS hostnames that are used in the cluster?.

D. The identification and CA certificates for the master FQDN hostname must be imported into each VPN cluster-
member device?.

Discussion 0

Correct Answer: B,C,D Vote an answer

Question #16

What transport protocol and port are used by GDOI for its IKE sessions that are established between the group
members and the key server?

A. UDP port 4500

B. ESP port 51

C. SSL port 443

D. UDP port 848

E. TCP port 848

Discussion 0

Correct Answer: D Vote an answer

Question #17

Which three statements about OCSP are correct? (Choose three.)

A. OCSP is defined in RFC2560.

B. OCSP uses only http as a transport.

C. A response indicator may be good, revoked, or unknown.

D. OCSP responders can use RSA and DSA signatures to validate that responses are from trusted entities.

E. OCSP is an updated version SCEP.

Discussion 0

Correct Answer: A,C,D Vote an answer

Question #18

Which additional configuration component is required to implement a MACSec Key Agreement policy on user-facing
Cisco Catalyst switch ports?

A. multi-auth host mode

B. 802.1x

C. TACACS+

D. PKI

E. port security

Discussion 0

Correct Answer: B Vote an answer

Question #19

Which two options best describe the authorization process as it relates to network access? (Choose two.)

A. the process of validating the provided credentials

B. the process of providing network access to the end user

C. the process of identifying the validity of a certificate, and validating specific fields in the certificate against an
identity store

D. applying enforcement controls, such as downloadable ACLs and VLAN assignment, to the network access session of
a user

Discussion 0

Correct Answer: B,D Vote an answer

Question #20

Which four techniques can you use for IP data plane security? (Choose four.)

A. FPM

B. QoS

C. interface ACLs

D. uRPF

E. MD5 authentication

F. Control Plane Policing

Discussion 0

Correct Answer: A,B,C,D Vote an answer

Question #21

Which statement about SNMP control plane policing is true?

A. SNMP traffic is processed via CEF in the data plane.

B. The CoPP SNMP feature can regard and manage traffic during heavy traffic load.

C. SNMP traps are processed by the data plane.

D. The SNMP management plane always has a source IP address

Discussion 0

Correct Answer: B Vote an answer

Explanation: Only visible for Pass4Leader members. You can sign-up / login (it's free).

Question #22

Refer to the exhibit.

if you apply the given command to a Cisco device running IOS or IOS XE, which two statements about connections to
the HTTP server on the device are true? (Choose two)

A. Connections will close after 60 seconds or as soon as the first request is processed

B. Connections will close after 60 seconds without activity or as soon as the first request is processed

C. Connections will close after 60 seconds without activity or 90 seconds with activity

D. The device will close each connection after 90seconds even if a connection is actively processing a request

E. When you apply the command. The device will immediately close any existing connections that have been open for
longer than 90 seconds

Discussion 0

Correct Answer: C,D Vote an answer

Download Free Cisco 350-018 Demo

Simply submit your e-mail address below to get started with our free demo of your Cisco 350-018 exam.