Free Cisco 350-018 Practice Test & Real Exam Questions

Exam Code/Number: 350-018
Exam Name/Title: CCIE Security Written Exam v4.0
Certification Provider: Cisco
Corresponding Certification: CCIE

Exam Questions: 875
Updated On: Aug 20, 2026

Question #56

Refer to the exhibit.

What is the purpose of the command in the NAT-PT for IPv6 implementation on a Cisco IOS device?

A. It defines address pool used by the IPv4 access-list.

B. It defines address pool used by the IPv6 access-list.

C. It defines the IPv4 address pool used by the NAT-PT for dynamic address mapping.

D. It defines the IPv6 address pool used by the NAT-PT for dynamic address mapping.

E. It defines the IPv4 address pool used by the NAT-PT for static address mapping

Discussion 0

Correct Answer: C Vote an answer

Explanation: Only visible for Pass4Leader members. You can sign-up / login (it's free).

Question #57

Refer to the exhibit.

Identify the behavior of the ACL if it is applied inbound on E0/0.

A. The ACL will pass the initial fragment for port 80 but drop the noninitial fragment for any port.

B. The ACL will pass both initial and non-initial fragments for port 80 only.

C. The ACL will drop the initial fragment for port 80 but pass the noninitial fragment for any port.

D. The ACL will drop both initial and noninitial fragments for port 80 only.

Discussion 0

Correct Answer: B Vote an answer

Question #58

What are four technologies that can be used to trace the source of an attack in a network environment with multiple
exit/entry points? (Choose four.)

A. Sinkholes

B. Traffic scrubbing

C. ICMP Unreachable messages

D. NetFlowv9

E. A honey pot

F. Remotely-triggered destination-based black holing

Discussion 0

Correct Answer: A,B,D,E Vote an answer

Explanation: Only visible for Pass4Leader members. You can sign-up / login (it's free).

Question #59

Which three statements regarding VLANs are true? (Choose three.)

A. The native VLAN is used for untagged traffic on an 802.1Q trunk.

B. Each VLAN must have an SVI configured on the Cisco Catalyst switch for it to be operational.

C. VLANs can be connected across wide-area networks.

D. To create a new VLAN on a Cisco Catalyst switch, the VLAN name, VLAN ID and VLAN type must all be specifically
configured by the administrator.

E. A VLAN is a broadcast domain.

Discussion 0

Correct Answer: A,C,E Vote an answer

Question #60

A Cisco IOS router is configured as follows:
ip dns spoofing 192.168.20.1
What will the router respond with when it receives a DNS query for its own host name?

A. The router will respond with 192.168.20.1.

B. The router will respond with the IP address of the incoming interface.

C. The router will ignore the DNS query and forward it directly to the DNS server.

D. The router will respond with 192.168.20.1 only if the outside interface is down.

Discussion 0

Correct Answer: D Vote an answer

Question #61

An exploit that involves connecting to a specific TCP port and gaining access to an administrative command prompt is
an example of which type of attack?

A. privilege escalation

B. botnet

C. DoS

D. Trojan horse

Discussion 0

Correct Answer: A Vote an answer

Question #62

DRAG DROP

Discussion 0

Correct Answer:

Question #63

Refer to the exhibit.

What does this configuration prevent?

A. FTP commands of GET or PUT for files with the ".bat" extension on all interfaces

B. HTTP downloads of files with the ".bat" extension on all interfaces

C. HTTP downloads of files with the ".batch" extension on the inside interface

D. FTP commands of GET or PUT for files with the ".batch" extension on the inside interface

Discussion 0

Correct Answer: A Vote an answer

Question #64

Which Cisco IPS appliance feature can automatically adjust the risk rating of IPS events based on the reputation of the
attacker?

A. event action rules

B. botnet traffic filter

C. global correlation inspection

D. anomaly detection

E. reputation filtering

Discussion 0

Correct Answer: C Vote an answer

Question #65

Which two statements about SNMP are true? (Choose two)

A. MIB is a hierarchical representation of management data on NMS.

B. NMS sends request to the agent from any source port.

C. NMS receives notifications from the agent on UDP 162.

D. SNMP operates at Layer-6 of the OSI model.

E. NMS sends a request to the agent at TCP port 161.

Discussion 0

Correct Answer: B,C Vote an answer

Question #66

If a host receives a TCP packet with an SEQ number of 1234, an ACK number of 5678, and a length of 1000 bytes, what
will it send in reply?

A. a TCP packet with SEQ number: 6678, and ACK number: 1234

B. a TCP packet with SEQ number: 2234, and ACK number: 5678

C. a TCP packet with SEQ number: 1234, and ACK number: 2234

D. a TCP packet with SEQ number: 5678, and ACK number 2234

Discussion 0

Correct Answer: D Vote an answer

Download Free Cisco 350-018 Demo

Simply submit your e-mail address below to get started with our free demo of your Cisco 350-018 exam.