Cisco 350-018 Online Practice Questions and Exam Preparation

Cisco 350-018 Online Questions & Answers

• Question 21:

  Which three fields are part of the AH header? (Choose three.)

  A. Source Address
  B. Destination Address
  C. Packet ICV
  D. Protocol ID
  E. Application Port
  F. SPI identifying SA
  G. Payload Data Type Identifier
  C. Packet ICV
  F. SPI identifying SA
  G. Payload Data Type Identifier

• Question 22:

  In Cisco Wireless LAN Controller (WLC) , which web policy enables failed Layer 2 authentication to fall back to WebAuth authentication with a user name and password ?

  A. Splash Page Web Redirect
  B. B. Passthough
  C. C.On MAC Filter Failure
  D. D. Authentcaiton
  E. E.Conditional Web Redirect
  C. C.On MAC Filter Failure

• Question 23:

  Which statement is true regarding Cisco ASA operations using software versions 8.3 and later?

  A. The global access list is matched first before the interface access lists.
  B. Both the interface and global access lists can be applied in the input or output direction.
  C. When creating an access list entry using the Cisco ASDM Add Access Rule window, choosing "global" as the interface will apply the access list entry globally.
  D. NAT control is enabled by default.
  E. The static CLI command is used to configure static NAT translation rules.
  C. When creating an access list entry using the Cisco ASDM Add Access Rule window, choosing "global" as the interface will apply the access list entry globally.

• Question 24:

  Refer to the exhibit.

  

  What is the meaning of the given error message?

  A. The PFS groups are mismatched
  B. IKE is disabled on the remote peer
  C. The mirrored crypto ACLs are mismatched.
  D. The pre-shared keys are mismatched
  D. The pre-shared keys are mismatched

• Question 25:

  Which two options represent definitions that are found in the syslog protocol (RFC 5426)? (Choose two.)

  A. Syslog message transport is reliable.
  B. Each syslog datagram must contain only one message.
  C. IPv6 syslog receivers must be able to receive datagrams of up to 1180 bytes.
  D. Syslog messages must be prioritized with an IP precedence of 7.
  E. Syslog servers must use NTP for the accurate time stamping of message arrival.
  B. Each syslog datagram must contain only one message.
  C. IPv6 syslog receivers must be able to receive datagrams of up to 1180 bytes.

• Question 26:

  Which transport method is used by the IEEE 802.1X protocol?

  A. EAPOL frames
  B. 802.3 frames
  C. UDP RADIUS datagrams
  D. PPPoE frames
  A. EAPOL frames

• Question 27:

  Which two statements about Flexible Packet Matching are true? (Choose two)

  A. It is supported by CSM management applications B. It can classify traffic at the bit level
  C. It can detected and filter malicious traffic
  D. It provides stateful classification for Layer 2 to Layer 7 traffic
  E. It can inspect non-IP protocol
  C. It can detected and filter malicious traffic

• Question 28:

  What are two authentication algorithms supported with SNMPv3 on an ASA? (Choose two.)

  A. 3DES
  B. DES
  C. SHA
  D. RC4
  E. MD5
  F. RC5
  C. SHA
  E. MD5

• Question 29:

  Which three HTTP header fields can be classified by NBAR for request messages? (Choose three.)

  A. User-Agent
  B. Server
  C. Referrer
  D. Content-Encoding
  E. Location
  F. From
  A. User-Agent
  C. Referrer
  F. From

• Question 30:

  Refer to the exhibit.

  

  Why does the EasyVPN session fail to establish between the client and server?

  A. incomplete ISAKMP profile configuration on the server
  B. incorrect ACL in the ISAKMP client group configuration
  C. incorrect IPsec phase 2 configuration on the server D. incorrect group configuration on the client
  E. ISAKMP key mismatch
  A. incomplete ISAKMP profile configuration on the server