Cisco 350-018 Online Practice Questions and Exam Preparation

Cisco 350-018 Online Questions & Answers

• Question 11:

  Which current RFC made RFCs 2409, 2407, and 2408 obsolete?

  A. RFC 4306
  B. RFC 2401
  C. RFC 5996
  D. RFC 4301
  E. RFC 1825
  A. RFC 4306

• Question 12:

  When configuring Cisco IOS Firewall CBAC operations on Cisco routers, the "inspection rule" can be applied at which two locations? (Choose two)

  A. at the untrusted interface in the inbound direction
  B. at the trusted and untrusted interfaces in the inbound direction
  C. at the untrusted interface in the outbound direction
  D. at the trusted interface in the outbound direction
  E. at the trusted and untrusted interfaces in the outbound direction
  F. at the trusted interface in the inbound direction
  B. at the trusted and untrusted interfaces in the inbound direction
  E. at the trusted and untrusted interfaces in the outbound direction

• Question 13:

  Refer to the exhibit.

  

  On R1, encrypt counters are incrementing. On R2, packets are decrypted, but the encrypt counter is not being incremented. What is the most likely cause of this issue?

  A. a routing problem on R1
  B. a routing problem on R2
  C. incomplete IPsec SA establishment
  D. crypto engine failure on R2
  E. IPsec rekeying is occurring
  B. a routing problem on R2

• Question 14:

  In an operating system environment, which three attacks give a user elevated privileges to access resources that are otherwise blocked? (Choose three.)

  A. backdoor
  B. rootkit
  C. privilege escalation
  D. DoS
  E. smurf
  A. backdoor
  B. rootkit
  C. privilege escalation

• Question 15:

  During the establishment of an Easy VPN tunnel, when is XAUTH performed?

  A. at the end of IKEv1 Phase 2
  B. at the beginning of IKEv1 Phase 1
  C. at the end of Phase 1 and before Phase 2 starts in IKEv1 and IKEv2
  D. at the end of Phase 1 and before Phase 2 starts in IKEv1
  D. at the end of Phase 1 and before Phase 2 starts in IKEv1

• Question 16:

  Which traffic class is defined for non-business-relevant applications and receives any bandwidth that remains after QoS policies have been applied?

  A. scavenger class
  B. best effort
  C. discard eligible
  D. priority queued
  A. scavenger class

• Question 17:

  To transport VXLAN traffic, which minimum MTU change, from a default MTU of 1500 bytes on the port, is required to avoid fragmentation and performance degradation?

  A. 9100 bytes
  B. 9114 bytes
  C. 1650 bytes
  D. 1550 bytes
  D. 1550 bytes

• Question 18:

  Drag each type of spoofing attack on the left to an action you can take to prevent it on the right

  Select and Place:

  

  

• Question 19:

  Drag each attack type on the left to the matching attack category on the right

  Select and Place:

  

  

• Question 20:

  Which two statements apply to the method that ASA uses for tunnel-group lookup for LAN- to-LAN IPSec connections when using PSK-based authentication? (Choose two.)

  A. If the configuration does not contain the tunnel-group with the IKE ID or peer IP address DefaultRAGroup, DefaultL2LGroup is used instead.
  B. DefaultL2LGroup is used only if the PSK check in DefaultRAGroup fails.
  C. DefaultRAGroup is used only if the PSK check in DefaultL2LGroup fails.
  D. You can delete and create new default tunnels groups as needed.
  A. If the configuration does not contain the tunnel-group with the IKE ID or peer IP address DefaultRAGroup, DefaultL2LGroup is used instead.
  B. DefaultL2LGroup is used only if the PSK check in DefaultRAGroup fails.