Cisco 350-018 Online Practice Questions and Exam Preparation

Cisco 350-018 Online Questions & Answers

• Question 321:

  Event Store is a component of which IPS application?

  A. SensorApp
  B. InterfaceApp C. MainApp
  D. NotificationApp
  E. AuthenticationApp
  C

• Question 322:

  Refer to the exhibit.

  

  Which option describes the behavior of this configuration?

  A. Host 10.10.10.1 will get translated as 20.20.20.1 from inside to outside.
  B. Host 20.20.20.1 will be translated as 10.10.10.1 from outside to inside.
  C. Host 20.20.20.1 will be translated as 10.10.10.1 from inside to outside.
  D. Host 10.10.10.1 will be translated as 20.20.20.1 from outside to inside.
  A. Host 10.10.10.1 will get translated as 20.20.20.1 from inside to outside.

• Question 323:

  crypto isakmp profile vpn1 vrf vpn1 keyring vpn1 match identity address 172.16.1.1 255.255.255.255 crypto map crypmap 1 ipsec-isakmp set peer 172.16.1.1 set transform-set vpn1 set isakmp-profile vpn1

  match address 101 ! interface Ethernet1/2 crypto map crypmap Which statements apply to the above configuration? (Choose two.)

  A. This configuration shows the VRF-Aware IPsec feature that is used to map the crypto ISAKMP profile to a specific VRF.
  B. VRF and ISAKMP profiles are mutually exclusive, so the configuration is invalid.
  C. An IPsec tunnel can be mapped to a VRF instance.
  D. Peer command under the crypto map is redundant and not required.
  A. This configuration shows the VRF-Aware IPsec feature that is used to map the crypto ISAKMP profile to a specific VRF.
  C. An IPsec tunnel can be mapped to a VRF instance.

• Question 324:

  Which of the following two options can you configure to avoid iBGP full mesh? (Choose two.)

  A. Route reflectors
  B. Confederations
  C. BGP NHT
  D. Local preference
  E. Virtual peering
  A. Route reflectors
  B. Confederations

• Question 325:

  Which three statements about Dynamic ARP inspection on Cisco seithes are true? (Choose three)

  A. The trusted database can be manually configured using the CLI
  B. Dynamic ARP inspection is supported only on access ports
  C. Dynamic ARP inspection does no perform ingress security checking
  D. DHCP snooping is used to dynamically build the trusted database
  E. Dynamic ARP inspection checks ARP packets against the trusted database
  F. Dynamic ARP inspection checks ARP packets on trusted and untrusted ports
  A. The trusted database can be manually configured using the CLI
  D. DHCP snooping is used to dynamically build the trusted database
  E. Dynamic ARP inspection checks ARP packets against the trusted database

• Question 326:

  Refer to the exhibit.

  

  According to this DHCP packet header, which field is populated by a DHCP relay agent with its own IP address before the DHCPDISCOVER message is forwarded to the DHCP server?

  A. ciaddr
  B. yiaddr
  C. siaddr
  D. giaddr
  D. giaddr

• Question 327:

  An attacker configures an access point to broadcast the same SSID that is used at a public hot-spot, and launches a deauthentication attack against the clients that are connected to the hot-spot, with the hope that the clients will then associate to the AP of the attacker.

  In addition to the deauthentication attack, what attack has been launched?

  A. man-in-the-middle
  B. MAC spoofing
  C. Layer 1 DoS
  D. disassociation attack
  A. man-in-the-middle

• Question 328:

  Which statement about the Cisco AnyConnect web Security module is true?

  A. It is VPN client software that works over the SSL protocol
  B. It is deployment on endpoints to route HTTP traffic to ScanSafe
  C. It is an endpoint component that is used with smart tunnels in a clientless SSL VPN
  D. It operates as an NAC Agent when it is configured with AnyConnect VPN client
  B. It is deployment on endpoints to route HTTP traffic to ScanSafe

• Question 329:

  Which two ISE Probes would be required to distinguish accurately the difference between an iPad and a MacBook Pro? (Choose two.)

  A. DHCP or DHCPSPAN
  B. SNMPTRAP
  C. SNMPQUERY
  D. NESSUS
  E. HTTP
  F. DHCP TRAP
  A. DHCP or DHCPSPAN
  E. HTTP

• Question 330:

  When routing is configured on ASA, which statement is true?

  A. If the default route is not present, then the routing table is checked.
  B. If the routing table has two matching entries, the packet is dropped.
  C. If routing table has two matching entries with same prefix length, the first entry is used.
  D. If routing table has two matching entries with different prefix lengths, the entry with the longer prefix length is used.
  D. If routing table has two matching entries with different prefix lengths, the entry with the longer prefix length is used.