Cisco 350-018 Online Practice Questions and Exam Preparation

Cisco 350-018 Online Questions & Answers

• Question 771:

  Which three parameters does the HTTP inspection engine use to inspect the traffic on Cisco IOS firewall? (Choose three.)

  A. source address
  B. application
  C. transfer encoding type
  D. minimum header length
  E. request method
  F. destination address
  B. application
  C. transfer encoding type
  E. request method

• Question 772:

  What Context-Based Access Control (CBAC) command sets the maximum time that a muter running Cisco IOS will wait for a new TCP session to reach the established state?

  A. ip inspect max-incomplete
  B. ip inspect tcp idle-time
  C. ip inspect tcp finwait-time
  D. ip inspect udp idle-time
  E. ip inspect tcp synwait-time
  E. ip inspect tcp synwait-time

• Question 773:

  Which statement about the effect of this configuration is true? Refer to the exhibit.

  

  A. It prevents man-in-the-middle attacks.
  B. Replay protection is disabled.
  C. Out-of-order frames are dropped.
  D. The replay window size is set to infinity.
  C. Out-of-order frames are dropped.

• Question 774:

  Which of these is an invalid syslog facility?

  B. 1
  C. 31
  D. 12
  C. 31

• Question 775:

  At the end of the Cisco TrustSec authentication process, which three pieces of information do both authenticator and supplicant know? (Choose three.)

  A. Peer device ID
  B. Peer Cisco TrustSec capability information
  C. SAP key
  D. Server device ID
  E. Service ID
  F. Server peers information
  A. Peer device ID
  B. Peer Cisco TrustSec capability information
  C. SAP key

• Question 776:

  Beacons, probe request, and association request frames are associated with which category?

  A. management
  B. control
  C. data
  D. request
  A. management

• Question 777:

  What are two actions you can take to Protect against DDoS attacks on Cisco routers and switches? (Choose two.)

  A. Implement MAC address filtering.
  B. FiltertheRFC-1918 address space.
  C. Configure PIM-SM.
  D. Rate limit SYN packets.
  E. Configure IP snooping.
  B. FiltertheRFC-1918 address space.
  D. Rate limit SYN packets.

• Question 778:

  What ASA feature can you use to restrict a user to a specific VPN group?

  A. a vpn filter
  B. MPF
  C. a Webtype ACL
  D. group-lock
  D. group-lock

• Question 779:

  Which authentication scheme, that is supported on the Cisco ASA, generates a unique key that is used in a single password challenge?

  A. one-time passwords
  B. disposable certificates
  C. password management
  D. Capcha web text
  A. one-time passwords

• Question 780:

  What security element must an organization have in place before it can implement a security audit and validate the audit results?

  A. an Incident Response Team
  B. firewalls
  C. network access control
  D. a security policy
  E. a Security Operations Center
  D. a security policy