Cisco 351-018 Online Practice Questions and Exam Preparation

Cisco 351-018 Online Questions & Answers

• Question 401:

  DNSSEC was designed to overcome which security limitation of DNS?

  A. DNS man-in-the-middle attacks
  B. DNS flood attacks
  C. DNS fragmentation attacks
  D. DNS hash attacks
  E. DNS replay attacks
  F. DNS violation attacks
  A. DNS man-in-the-middle attacks

• Question 402:

  What is the purpose of the BGP TTL security check?

  A. The BGP TTL security check is used for iBGP session.
  B. The BGP TTL security check protects against CPU utilization-based attacks.
  C. The BGP TTL security check checks for a TTL value in packet header of less than or equal to for successful peering.
  D. The BGP TTL security check authenticates a peer.
  E. The BGP TTL security check protects against routing table corruption.
  B. The BGP TTL security check protects against CPU utilization-based attacks.

• Question 403:

  Which two statements about the multiple context mode running Version 9.x are true? (Choose two.)

  A. RIP is not supported.
  B. An interface cannot be shared by multiple contexts.
  C. Remote access VPN is supported.
  D. Only the admin and context configuration files are supported.
  E. OSPFv3 is supported.
  F. Multicast feature is supported
  G. Site-To-Site VPN feature is supported
  A. RIP is not supported.
  G. Site-To-Site VPN feature is supported

• Question 404:

  Which domain is used for a reverse lookup of IPv4 addresses?

  A. in-addr.arpa
  B. ip4.arpa
  C. in-addr.net
  D. ip4.net
  A. in-addr.arpa

• Question 405:

  crypto isakmp profile vpn1 vrf vpn1 keyring vpn1 match identity address 172.16.1.1 255.255.255.255 crypto map crypmap 1 ipsec-isakmp set peer 172.16.1.1 set transform-set vpn1 set isakmp-profile vpn1 match address 101 ! interface Ethernet1/2 crypto map crypmap Which statements apply to the above configuration? (Choose two.)

  A. This configuration shows the VRF-Aware IPsec feature that is used to map the crypto ISAKMP profile to a specific VRF.
  B. VRF and ISAKMP profiles are mutually exclusive, so the configuration is invalid.
  C. An IPsec tunnel can be mapped to a VRF instance.
  D. Peer command under the crypto map is redundant and not required.
  A. This configuration shows the VRF-Aware IPsec feature that is used to map the crypto ISAKMP profile to a specific VRF.
  C. An IPsec tunnel can be mapped to a VRF instance.

• Question 406:

  Which three traffic conditions can be matched when configuring single rate, dual token bucket traffic policing on Cisco routers? (Choose three.)

  A. conform
  B. normal
  C. violate
  D. peak
  E. exceed
  F. average
  A. conform
  C. violate
  E. exceed

• Question 407:

  Which three nonproprietary EAP methods do not require the use of a client-side certificate for mutual authentication? (Choose three.)

  A. LEAP
  B. EAP-TLS
  C. PEAP
  D. EAP-TTLS
  E. EAP-FAST
  C. PEAP
  D. EAP-TTLS
  E. EAP-FAST

• Question 408:

  Which two ISE Probes would be required to distinguish accurately the difference between an iPad and a MacBook Pro? (Choose two.)

  A. DHCP or DHCPSPAN
  B. SNMPTRAP
  C. SNMPQUERY
  D. NESSUS
  E. HTTP
  F. DHCP TRAP
  A. DHCP or DHCPSPAN
  E. HTTP

• Question 409:

  What is the ICMPv6 type and destination IPv6 address for a Neighbor Solicitation packet that is sent by a router that wants to learn about a newly introduced network device?

  A. ICMP type 136 and the Solicited-Node multicast address
  B. ICMP type 135 and the Broadcast address
  C. ICMP type 136 and the All-Routers multicast address
  D. ICMP type 135 and the All-Routers multicast address
  E. ICMP type 135 and the Solicited-Node multicast address
  F. ICMP type 136 and the Broadcast address
  E. ICMP type 135 and the Solicited-Node multicast address

• Question 410:

  Given the IPv4 address 10.10.100.16, which two addresses are valid IPv4-compatible IPv6 addresses? (Choose two.)

  A. :::A:A:64:10
  B. ::10:10:100:16
  C. 0:0:0:0:0:10:10:100:16
  D. 0:0:10:10:100:16:0:0:0
  B. ::10:10:100:16
  C. 0:0:0:0:0:10:10:100:16