Cisco 351-018 Online Practice Questions and Exam Preparation

Cisco 351-018 Online Questions & Answers

• Question 1:

  Which three statements about IKEv2 are correct? (Choose three.)

  A. INITIAL_CONTACT is used to synchronize state between peers.
  B. The IKEv2 standard defines a method for fragmenting large messages.
  C. The initial exchanges of IKEv2 consist of IKE_SA_INIT and IKE_AUTH.
  D. Rekeying IKE and child SAs is facilitated by the IKEv2 CREATE_CHILD_SA exchange.
  E. NAT-T is not supported.
  F. Attribute policy push (via the configuration payload) is only supported in REQUEST/REPLY mode.
  A. INITIAL_CONTACT is used to synchronize state between peers.
  C. The initial exchanges of IKEv2 consist of IKE_SA_INIT and IKE_AUTH.
  D. Rekeying IKE and child SAs is facilitated by the IKEv2 CREATE_CHILD_SA exchange.

• Question 2:

  Refer to the exhibit of an ISAKMP debug.

  

  Which message of the exchange is failing?

  A. main mode 1
  B. main mode 3
  C. aggressive mode 1
  D. main mode 5
  E. aggressive mode 2
  B. main mode 3

• Question 3:

  Which statement about the Cisco NAC CAS is true?

  A. The Cisco NAC CAS acts as a gateway between untrusted networks.
  B. The Cisco NAC CAS can only operate as an in-band real IP gateway.
  C. The Cisco NAC CAS can operate as an out-of-band virtual gateway.
  D. The Cisco NAC CAS is an administration and monitoring server.
  C. The Cisco NAC CAS can operate as an out-of-band virtual gateway.

• Question 4:

  What action does a RADIUS server take when it cannot authenticate the credentials of a user?

  A. An Access-Reject message is sent.
  B. An Access-Challenge message is sent, and the user is prompted to re-enter credentials.
  C. A Reject message is sent.
  D. A RADIUS start-stop message is sent via the accounting service to disconnect the session.
  A. An Access-Reject message is sent.

• Question 5:

  What entities decrypt a transmission sent by a GDOI group member?

  A. all group members
  B. the key server only
  C. the peer that is indicated by the key server
  D. the key server and the peer that is indicated by the key server
  A. all group members

• Question 6:

  Which algorithm is used to generate the IKEv2 session key?

  A. Diffie-Hellman
  B. Rivest, Shamir, and Adleman
  C. Secure Hash Algorithm
  D. Rivest Cipher 4
  A. Diffie-Hellman

• Question 7:

  In HTTPS session establishment, what does the server hello message inform the client?

  A. that the server will accept only HTTPS traffic
  B. which versions of SSL/TLS the server will accept
  C. which ciphersuites the client may choose from
  D. which ciphersuite the server has chosen to use
  E. the PreMaster secret to use in generating keys
  D. which ciphersuite the server has chosen to use

• Question 8:

  Which statement is true about IKEv2 preshared key authentication between two peers?

  A. IKEv2 allows usage of different preshared keys for local and remote authentication.
  B. IKEv2 allows usage of only one preshared key.
  C. IKEv2 allows usage of only one preshared key and only in hub-and-spoke topology.
  D. IKEv2 does not allow usage of preshared key authentication.
  A. IKEv2 allows usage of different preshared keys for local and remote authentication.

• Question 9:

  When is the supplicant considered to be clientless?

  A. when the authentication server does not have credentials to authenticate.
  B. when the authenticator is missing the dot1x guest VLAN under the port with which the supplicant is connected.
  C. when the supplicant fails EAP-MD5 challenge with the authentication server.
  D. when the supplicant fails to respond to EAPOL messages from the authenticator.
  E. when the authenticator is missing the reauthentication timeout configuration under the port with which the supplicant is connected.
  D. when the supplicant fails to respond to EAPOL messages from the authenticator.

• Question 10:

  Which Cisco IPS appliance signature engine defines events that occur in a related manner, within a sliding time interval, as components of a combined signature?

  A. Service engine
  B. Sweep engine
  C. Multistring engine
  D. Meta engine
  D. Meta engine