Cisco 351-018 Online Practice Questions and Exam Preparation

Cisco 351-018 Online Questions & Answers

• Question 21:

  In the context of a botnet, what is true regarding a command and control server?

  A. It can launch an attack using IRC or Twitter.
  B. It is another name for a zombie.
  C. It is used to generate a worm.
  D. It sends the command to the botnets via adware.
  A. It can launch an attack using IRC or Twitter.

• Question 22:

  Which two address translation types can map a group of private addresses to a smaller group of public addresses? (Choose two.)

  A. static NAT
  B. dynamic NAT
  C. dynamic NAT with overloading
  D. PAT
  E. VAT
  C. dynamic NAT with overloading
  D. PAT

• Question 23:

  Which protocol provides the same functions in IPv6 that IGMP provides in IPv4 networks?

  A. ICMPv6
  B. ND
  C. MLD
  D. TLA
  C. MLD

• Question 24:

  Which three types of traffic are processed by CoPP configured on the device? (Choose three.)

  A. tansient traffic
  B. routing protocol traffic
  C. IPsec traffic
  D. traffic that is destined to the device interface
  E. any traffic filtered by the access list
  F. traffic from a management protocol such as Telnet or SNMP
  B. routing protocol traffic
  D. traffic that is destined to the device interface
  F. traffic from a management protocol such as Telnet or SNMP

• Question 25:

  Which four Cisco IOS features are used to implement First Hop Security in IPv6? (Choose four.)

  A. IPv6 First-Hop Security Binding Table
  B. IPv6 Device Tracking
  C. IPv6 RA Guard
  D. SeND
  E. IPv6 Selective Packet Discard
  F. IPv6 Source Guard
  A. IPv6 First-Hop Security Binding Table
  B. IPv6 Device Tracking
  C. IPv6 RA Guard
  D. SeND

• Question 26:

  According to RFC-5426, syslog senders must support sending syslog message datagrams to which port?

  A. TCP port 514
  B. UDP port 514
  C. TCP port 69
  D. UDP port 69
  E. TCP port 161
  F. UDP port 161
  B. UDP port 514

• Question 27:

  What transport protocol and port are used by GDOI for its IKE sessions that are established between the group members and the key server?

  A. UDP port 848 B. TCP port 848
  C. ESP port 51
  D. SSL port 443
  E. UDP port 4500
  A. UDP port 848 B. TCP port 848

• Question 28:

  Which three attributes may be configured as part of the Common Tasks panel of an authorization profile in the Cisco ISE solution? (Choose three.)

  A. VLAN
  B. voice VLAN
  C. dACL name
  D. voice domain permission
  E. SGT
  A. VLAN
  C. dACL name
  D. voice domain permission

• Question 29:

  Which two statements about the ISO are true? (Choose two.)

  A. The ISO is a government-based organization.
  B. The ISO has three membership categories: Member, Correspondent, and Subscribers.
  C. Subscriber members are individual organizations.
  D. Only member bodies have voting rights.
  E. Correspondent bodies are small countries with their own standards organization.
  B. The ISO has three membership categories: Member, Correspondent, and Subscribers.
  D. Only member bodies have voting rights.

• Question 30:

  Which three statements are true about the SSH protocol? (Choose three.)

  A. SSH protocol runs over TCP port 23.
  B. SSH protocol provides for secure remote login and other secure network services over an insecure network.
  C. Telnet is more secure than SSH for remote terminal access.
  D. SSH protocol runs over UDP port 22.
  E. SSH transport protocol provides for authentication, key exchange, confidentiality, and integrity.
  F. SSH authentication protocol supports public key, password, host based, or none as authentication methods.
  B. SSH protocol provides for secure remote login and other secure network services over an insecure network.
  E. SSH transport protocol provides for authentication, key exchange, confidentiality, and integrity.
  F. SSH authentication protocol supports public key, password, host based, or none as authentication methods.