20% OFF Passleader 350-018 Study Materials Ensure 100% PASS (241-250)

QUESTION 241
Which two current RFCs discuss special use IP addresses that may be used as a checklist of invalid routing prefixes for IPv4 and IPv6 addresses? (Choose two.)

A.    RFC 5156
B.    RFC 5735
C.    RFC 3330
D.    RFC 1918
E.    RFC 2827

Answer: AB

QUESTION 242
Which four options could be flagged as potential issues by a network security risk assessment? (Choose four.)

A.    router hostname and IP addressing scheme
B.    router filtering rules
C.    route optimization
D.    database connectivity and RTT
E.    weak authentication mechanisms
F.    improperly configured email servers
G.    potential web server exploits

Answer: BEFG

QUESTION 243
Which three of these situations warrant engagement of a Security Incident Response team? (Choose three.)

A.    loss of data confidentiality/integrity
B.    damage to computer/network resources
C.    denial of service (DoS)
D.    computer or network misuse/abuse
E.    pornographic blogs/websites

Answer: ACD

QUESTION 244
Which three statements about the Cisco IPS sensor are true? (Choose three.)

A.    You cannot pair a VLAN with itself.
B.    For a given sensing interface, an interface used in a VLAN pair can be a member of another inline interface pair.
C.    For a given sensing interface, a VLAN can be a member of only one inline VLAN pair, however, a given VLAN can be a member of an inline VLAN pair on more than one sensing interface.
D.    The order in which you specify the VLANs in a inline pair is significant.
E.    A sensing interface in inline VLAN pair mode can have from 1 to 255 inline VLAN pairs.

Answer: ACE

QUESTION 245
Which two VLSM subnets, when taken as a pair, overlap? (Choose two.)

A.    10.22.21.128/26
B.    10.22.22.128/26
C.    10.22.22.0/27
D.    10.22.20.0/23
E.    10.22.16.0/22

Answer: AD

QUESTION 246
The address of an inside client is translated from a private address to a public address by a NAT router for access to an outside web server. What term describes the destination address (client) after the outside web server responds, and before it hits the NAT router?

A.    inside local
B.    inside global
C.    outside local
D.    outside global

Answer: B

QUESTION 247
What is the ICMPv6 type and destination IPv6 address for a Neighbor Solicitation packet that is sent by a router that wants to learn about a newly introduced network device?

A.    ICMP type 136 and the Solicited-Node multicast address
B.    ICMP type 135 and the Broadcast address
C.    ICMP type 136 and the All-Routers multicast address
D.    ICMP type 135 and the All-Routers multicast address
E.    ICMP type 135 and the Solicited-Node multicast address
F.    ICMP type 136 and the Broadcast address

Answer: E

QUESTION 248
Which three statements are true about Cryptographically Generated Addresses for IPv6? (Choose three.)

A.    They prevent spoofing and stealing of existing IPv6 addresses.
B.    They are derived by generating a random 128-bit IPv6 address based on the public key of the node.
C.    They are used for securing neighbor discovery using SeND.
D.    SHA or MD5 is used during their computation.
E.    The minimum RSA key length is 512 bits.
F.    The SHA-1 hash function is used during their computation.

Answer: ACF

QUESTION 249
Which three options are extension headers that are implemented in IPv6? (Choose three.)

A.    Routing Header.
B.    Generic Tunnel Header.
C.    Quality of Service Header.
D.    Fragment Header.
E.    Encapsulating Security Payload Header.
F.    Path MTU Discovery Header.

Answer: ADE

QUESTION 250
What is a key characteristic of MSTP?

A.    always uses a separate STP instance per VLAN to increase efficiency
B.    only supports a single STP instance for all VLANs
C.    is a Cisco proprietary standard
D.    several VLANs can be mapped to the same spanning-tree instance

Answer: D

20% OFF Passleader 350-018 Study Materials Ensure 100% PASS