Cisco 350-018 Online Practice Questions and Exam Preparation

Cisco 350-018 Online Questions & Answers

• Question 631:

  Which layer of the OSI model is referenced when utilizing http inspection on the Cisco ASA to filter Instant Messaging or Peer to Peer networks with the Modular Policy Framework?

  A. application layer
  B. presentation layer
  C. network layer
  D. transport layer
  A. application layer

• Question 632:

  Aggregate global IPv6 addresses begin with which bit pattern in the first 16-bit group?

  A. 000/3
  B. 001/3
  C. 010/2
  D. 011/2
  B. 001/3

• Question 633:

  What is the effect of the given command?

  Refer to the exhibit.

  

  A. It enables CoPP on the FastEthernet 0/0 interface for SSH and SNMP management traffic.
  B. It enables MPP on the FastEthernet 0/0 interface for SSH and SNMP management traffic and CoPP for all other protocols.
  C. It enables MPP on the FastEthernet 0/0 interface, allowing only SSH and SNMP management traffic.
  D. It enables QoS policing on the control plane of the FasEthernet 0/0 interface.
  E. It enables MPP on the FastEthernet 0/0 interface by enforcing rate-limiting for SSH and SNMP management traffic.
  A. It enables CoPP on the FastEthernet 0/0 interface for SSH and SNMP management traffic.

• Question 634:

  Refer to the exhibit.What is the effect of the given configuration?

  A. FTP connections are unaffected.
  B. It resets and logs FTP connections to cisco.com and hp.com only.
  C. It resets FTP connections to cisco.com and hp.com only.
  D. It resets FTP connections to all sites except cisco.com and hp.com.
  E. It resets and logs FTP connections to all except cisoc.com and hp.com.
  D. It resets FTP connections to all sites except cisco.com and hp.com.

• Question 635:

  When implementing WLAN security, what are three benefits of using the TKIP instead of WEP? (Choose three.)

  A. TKIP uses an advanced encryption scheme based on AES.
  B. TKIP provides authentication and integrity checking using CBC-MAC.
  C. TKIP provides per-packet keying and a rekeying mechanism.
  D. TKIP provides message integrity check.
  E. TKIP reduces WEP vulnerabilities by using a different hardware encryption chipset.
  F. TKIP uses a 48-bit initialization vector.
  C. TKIP provides per-packet keying and a rekeying mechanism.
  D. TKIP provides message integrity check.
  F. TKIP uses a 48-bit initialization vector.

• Question 636:

  Which domain is used for a reverse lookup of IPv4 addresses?

  A. in-addr.arpa
  B. ip4.arpa
  C. in-addr.net
  D. ip4.net
  A. in-addr.arpa

• Question 637:

  What is the purpose of the BGP TTL security check?

  A. To use for IBGP session
  B. To protect against CPU utilization-based attacks
  C. To protect against routing table corruption
  D. To authenticate a peer
  E. To check for a TTL value in packet header of less than or equal to for successful peering
  E. To check for a TTL value in packet header of less than or equal to for successful peering

• Question 638:

  Refer to the exhibit.

  

  Which statement regarding the output is true?

  A. Every 1800 seconds the secondary name server will query the SOA record of the primary name server for updates.
  B. If the secondary name server has an SOA record with the serial number of 10973815, it will initiate a zone transfer on the next cycle.
  C. Other DNS servers will cache records from this domain for 864000 seconds (10 days) before requesting them again.
  D. Email queries concerning this domain should be sent to "[email protected]".
  E. Both primary and secondary name servers will clear (refresh) their caches every 7200 seconds to ensure that up-to-date information is always in use.
  B. If the secondary name server has an SOA record with the serial number of 10973815, it will initiate a zone transfer on the next cycle.

• Question 639:

  Refer to the exhibit.

  

  What is the effect of the given configuration?

  A. It sets the number of neighbor solicitation message to 60 and sets the retransmission interval to 3600 milliseconds
  B. It sets the number of duplicate address detection attempts to 60 and sets the duplicate address detection interval to 3600 milliseconds
  C. It sets the duplicate address detection interval to 60 seconds and sets the IPv6 neighbor solicitation interval to 3600 milliseconds
  D. It sets the duplicate address detection interval 60 seconds and the IPv6 neighbor reachable time to 3600 milliseconds
  E. It sets the number of neighbor solicitation message to 60 and sets the duplicate address detection interval to 3600 seconds
  C. It sets the duplicate address detection interval to 60 seconds and sets the IPv6 neighbor solicitation interval to 3600 milliseconds

• Question 640:

  Which two statements about SOX are true? (Choose two.)

  A. SOX is an IEFT compliance procedure for computer systems security.
  B. SOX is a US law.
  C. SOX is an IEEE compliance procedure for IT management to produce audit reports.
  D. SOX is a private organization that provides best practices for financial institution computer systems.
  E. Section 404 of SOX is related to IT compliance.
  B. SOX is a US law.
  E. Section 404 of SOX is related to IT compliance.