Cisco 351-018 Online Practice Questions and Exam Preparation

Cisco 351-018 Online Questions & Answers

• Question 11:

  What feature on the Cisco ASA is used to check for the presence of an up-to-date antivirus vendor on an AnyConnect client?

  A. Dynamic Access Policies with no additional options
  B. Dynamic Access Policies with Host Scan enabled
  C. advanced endpoint assessment
  D. LDAP attribute maps obtained from Antivirus vendor
  B. Dynamic Access Policies with Host Scan enabled

• Question 12:

  Which statement about SMTP is true?

  A. SMTP uses UDP port 25.
  B. The POP protocol is used by the SMTP client to manage stored mail.
  C. The IMAP protocol is used by the SMTP client to retrieve and manage stored email.
  D. The mail delivery agent in the SMTP architecture is responsible for DNS lookup.
  E. SMTP uses TCP port 20.
  C. The IMAP protocol is used by the SMTP client to retrieve and manage stored email.

• Question 13:

  Which RFC outlines BCP 84?

  A. RFC 3704
  B. RFC 2827
  C. RFC 3030
  D. RFC 2267
  E. RFC 1918
  A. RFC 3704

• Question 14:

  Which two IPv6 tunnel types support only point-to-point communication? (Choose two.)

  A. manually configured
  B. automatic 6to4
  C. ISATAP
  D. GRE
  A. manually configured
  D. GRE

• Question 15:

  During the establishment of an Easy VPN tunnel, when is XAUTH performed?

  A. at the end of IKEv1 Phase 2
  B. at the beginning of IKEv1 Phase 1
  C. at the end of Phase 1 and before Phase 2 starts in IKEv1 and IKEv2
  D. at the end of Phase 1 and before Phase 2 starts in IKEv1
  D. at the end of Phase 1 and before Phase 2 starts in IKEv1

• Question 16:

  Which IPS appliance signature engine inspects IPv6 Layer 3 traffic?

  A. Atomic IP
  B. Meta
  C. Atomic IP Advanced
  D. Fixed
  E. Service
  C. Atomic IP Advanced

• Question 17:

  Which signature engine is used to create a custom IPS signature on a Cisco IPS appliance that triggers when a vulnerable web application identified by the "/runscript.php" URI is run?

  A. AIC HTTP
  B. Service HTTP
  C. String TCP
  D. Atomic IP
  E. META
  F. Multi-String
  B. Service HTTP

• Question 18:

  Which three configuration tasks are required for VPN clustering of AnyConnect clients that are connecting to an FQDN on the Cisco ASA?? (Choose three.)

  A. The redirect-fqdn command must be entered under the vpn load-balancing sub-configuration.
  B. Each ASA in the VPN cluster must be able to resolve the IP of all DNS hostnames that are used in the cluster?.
  C. The identification and CA certificates for the master FQDN hostname must be imported into each VPN cluster-member device?.
  D. The remote-access IP pools must be configured the same on each VPN cluster-member interface.
  A. The redirect-fqdn command must be entered under the vpn load-balancing sub-configuration.
  B. Each ASA in the VPN cluster must be able to resolve the IP of all DNS hostnames that are used in the cluster?.
  C. The identification and CA certificates for the master FQDN hostname must be imported into each VPN cluster-member device?.

• Question 19:

  Which protocol does 802.1X use between the supplicant and the authenticator to authenticate users who wish to access the network?

  A. SNMP
  B. TACACS+
  C. RADIUS
  D. EAP over LAN
  E. PPPoE
  D. EAP over LAN

• Question 20:

  After a client discovers a supportable wireless network, what is the correct sequence of operations that the client will take to join it?

  A. association, then authentication
  B. authentication, then association
  C. probe request, then association
  D. authentication, then authorization
  B. authentication, then association