Cisco 350-018 Online Practice Questions and Exam Preparation

Cisco 350-018 Online Questions & Answers

• Question 701:

  Which is an example of a network reconnaissance attack?

  A. botnets
  B. backdoor
  C. ICMP sweep
  D. firewalk
  E. inverse mapping
  C. ICMP sweep

• Question 702:

  Under what condition will a switch with DHCP snooping configured permit a DHCP packet?

  A. When the source MAC address and DHCP client hardware address are different from the address in a packet that was received on an untrusted interface
  B. When it receives a DHCPRELEASE message in which the interface information in the DHCP binding database is different from the interface on which the message was received
  C. When it receives a DHCPPLEASEQUERY from outside the network
  D. When a DHCP relay agent forwards a packet with option-82tiformation from a trusted port
  D. When a DHCP relay agent forwards a packet with option-82tiformation from a trusted port

• Question 703:

  Which action is performed first on the Cisco ASA appliance when it receives an incoming packet on its outside interface?

  A. check if the packet is permitted or denied by the inbound ACL applied to the outside interface
  B. check if the packet is permitted or denied by the global ACL
  C. check if the packet matches an existing connection in the connection table
  D. check if the packet matches an inspection policy
  E. check if the packet matches a NAT rule
  F. check if the packet needs to be passed to the Cisco ASA AIP-SSM for inspections
  C. check if the packet matches an existing connection in the connection table

• Question 704:

  If a cisco ASA firewall that is configured in multiple-context mode of operation receives a packet whose destination MAC address is a multicast address,how is the packet routed?

  A. The Packets dropped
  B. The packet is duplicated and forwarded to every context
  C. The packet is forwarded to the admin context only
  D. The packet duplicated and forwarded to every context except admin
  B. The packet is duplicated and forwarded to every context

• Question 705:

  Which three features describe DTLS protocol? (Choose three.)

  A. DTLS handshake does not support reordering or manage loss packets.
  B. DTLS provides enhanced security, as compared to TLS.
  C. DTLS provides block cipher encryption and decryption services.
  D. DTLS is designed to prevent man-in-the-middle attacks, message tampering, and message forgery.
  E. DTLS is used by application layer protocols that use UDP as a transport mechanism.
  F. DTLS does not support replay detection.
  C. DTLS provides block cipher encryption and decryption services.
  D. DTLS is designed to prevent man-in-the-middle attacks, message tampering, and message forgery.
  E. DTLS is used by application layer protocols that use UDP as a transport mechanism.

• Question 706:

  What is an example of a stream cipher?

  A. RC5
  B. DES
  C. RC4
  D. Blowfish
  C. RC4

• Question 707:

  For what reason has the IPv6 Type 0 Routing Header been recommended for deprecation?

  A. When Type 0 traffic is blocked by a firewall policy, all other traffic with routing headers is dropped automatically.
  B. It can conflict with ingress filtering.
  C. It can create a black hole when used in combination with other routing headers.
  D. Attackers can exploit its functionality to generate DoS attacks.
  D. Attackers can exploit its functionality to generate DoS attacks.

• Question 708:

  MACsec, which is defined in 802.1AE, provides MAC-layer encryption over wired networks. Which two statements about MACsec are true? (Choose two.)

  A. Only links between network access devices and endpoint devices can be secured by using MACsec.
  B. MACsec is designed to support communications between network devices only.
  C. MACsec manages the encryption keys that the MKA protocol uses.
  D. A switch that uses MACsec accepts either MACsec or non-MACsec frames, depending on the policy that is associated with the client.
  A. Only links between network access devices and endpoint devices can be secured by using MACsec.
  D. A switch that uses MACsec accepts either MACsec or non-MACsec frames, depending on the policy that is associated with the client.

• Question 709:

  Refer to the exhibit,

  

  which shows a partial configuration for the EzVPN server. Which three missing ISAKMP profile options are required to support EzVPN using DVTI? (Choose three.)

  A. match identity group
  B. trustpoint
  C. virtual-interface
  D. keyring
  E. enable udp-encapsulation
  F. isakmp authorization list
  G. virtual-template
  A. match identity group
  F. isakmp authorization list
  G. virtual-template

• Question 710:

  Which additional capability was added in IGMPv3?

  A. leave group messages support
  B. source filtering support
  C. group-specific host membership queries support
  D. IPv6 support
  E. authentication support between the multicast receivers and the last hop router
  B. source filtering support