Cisco 350-018 Online Practice Questions and Exam Preparation

Cisco 350-018 Online Questions & Answers

• Question 371:

  Which IPv4 header field usually increments for each subsequent packet sent?

  A. Flag
  B. Fragment Offset
  C. Identification
  D. Time To Live
  C. Identification

• Question 372:

  

  Refer to the exhibit.

  Which command caused the above messages?

  A. Neighbor 101.0.0.1 maximum-prefix 500 80 warning-only.
  B. Neighbor 101.0.0.1 maximum-prefix 500 90.
  C. Neighbor 101.0.0.1 maximum-prefix 500 70.
  D. Neighbor 101.0.0.1 maximum-prefix 500 70 warning-only.
  C. Neighbor 101.0.0.1 maximum-prefix 500 70.

• Question 373:

  Which MAC address control command enables usage monitoring for a CAM table on a switch?

  A. mac-address-table synchronize
  B. mac-address-table limit
  C. mac-address-table secure
  D. mac-address-table notification threshold
  E. mac-address-table learning
  D. mac-address-table notification threshold

• Question 374:

  Which PKCS is invoked during IKE MM5 and MM6 when digital certificates are used as the authentication method?

  A. PKCS#7
  B. PKCS#10
  C. PKCS#13
  D. PKCS#11
  E. PKCS#3
  A. PKCS#7

• Question 375:

  Which two network protocols can operate on the application layer? (Choose two)

  A. UDP
  B. TCP
  C. SMB
  D. DNS
  E. DCCP
  F. NetBIOS
  C. SMB
  D. DNS

• Question 376:

  What feature on the Cisco ASA is used to check for the presence of an up-to-date antivirus vendor on an AnyConnect client?

  A. Dynamic Access Policies with no additional options
  B. Dynamic Access Policies with Host Scan enabled
  C. advanced endpoint assessment
  D. LDAP attribute maps obtained from Antivirus vendor
  B. Dynamic Access Policies with Host Scan enabled

• Question 377:

  Which option is an example of network reconnaissance attack?

  A. botnets
  B. ping of death
  C. SYN flooding
  D. inverse mapping
  D. inverse mapping

• Question 378:

  Which two statements about the Cisco AnyConnect client Trusted Network Detection feature are true? (Choose two.)

  A. The feature relies only on the DNS server list to detect whether the client machine is in a trusted or untrusted network.
  B. An attacker can theoretically host a malicious DHCP server and return data that triggers the client to believe that it resides in a trusted network.
  C. If an attacker knows the DNS server value that is configured in the Cisco AnyConnect profile and provisions the DHCP server to return both a real and spoofed value, then Cisco AnyConnect considers the endpoint to be in an untrusted network.
  D. The feature does not provide AnyConnect ability to automatically establish VPN connection when the user is outside the trusted network.
  B. An attacker can theoretically host a malicious DHCP server and return data that triggers the client to believe that it resides in a trusted network.
  C. If an attacker knows the DNS server value that is configured in the Cisco AnyConnect profile and provisions the DHCP server to return both a real and spoofed value, then Cisco AnyConnect considers the endpoint to be in an untrusted network.

• Question 379:

  Which two statements about PVLAN port types are true ? (Choose two)

  A. A promiscuous port can send traffic to all ports within a broadcast domain
  B. An isolated port can receive traffic t from promiscuous ports in any community on its Broadcast domain, but can send traffic only to ports in its own community
  C. An isolated port can send and receive traffic only to and from promiscuous ports
  D. A community port can send traffic to promiscuous ports in other communities its Broadcast domain
  E. A community port can send traffic to community ports in other communities its Broadcast domain
  F. A promiscuous can send traffic to to community ports in other Broadcast domainS
  A. A promiscuous port can send traffic to all ports within a broadcast domain
  C. An isolated port can send and receive traffic only to and from promiscuous ports

• Question 380:

  Which statement about the AH is true?

  A. AH authenticates only the data.
  B. AH authenticates only the IP header.
  C. AH authenticates only the TCP-UDP header.
  D. AH authenticates the entire packet and any mutable fields.
  E. AH authenticates the entire packet except for any mutable fields.
  E. AH authenticates the entire packet except for any mutable fields.