Cisco 351-018 Online Practice Questions and Exam Preparation

Cisco 351-018 Online Questions & Answers

• Question 41:

  Which two statements about VTP passwords are true? (Choose two)

  A. The VTP password can only be configured when the switch is in Server mode.
  B. The VTP password is sent in the summary advertisements..
  C. The VTP password is encrypted for confidentiality using 3DES.
  D. VTP is not required to be configured on all switches in the domain.
  E. The VTP password is hashed to preserve authenticity using the MD5 algorithm.
  F. The VTP password can only be configured when the switch is in Client mode.
  B. The VTP password is sent in the summary advertisements..
  E. The VTP password is hashed to preserve authenticity using the MD5 algorithm.

• Question 42:

  Refer to the exhibit.

  

  The client is protected by a firewall. An IPv6 SMTP connection from the client to the server on TCP port 25 will be subject to which action?

  A. pass action by the HTTP_CMAP
  B. inspection action by the TCP_CMAP
  C. inspection action by the SMTP_CMAP
  D. drop action by the default class
  E. pass action by the HTTP_CMAP
  B. inspection action by the TCP_CMAP

• Question 43:

  For which two reasons BVI is required in the Transparent Cisco IOS Firewall? (Choose two)

  A. BVI is required for the inspection of IP traffic.
  B. The firewall can perform routing on bridged interfaces.
  C. BVI is required if routing is disabled on the firewall.
  D. BVI is required if more than two interfaces are in a bridge group.
  E. BVI is required for the inspection of non-IP traffic.
  F. BVI can manage the device without having an interface that is configured for routing.
  D. BVI is required if more than two interfaces are in a bridge group.
  F. BVI can manage the device without having an interface that is configured for routing.

• Question 44:

  Which authentication scheme, that is supported on the Cisco ASA, generates a unique key that is used in a single password challenge?

  A. one-time passwords
  B. disposable certificates
  C. password management
  D. Capcha web text
  A. one-time passwords

• Question 45:

  Which three authentication methods does the Cisco IBNS Flexible Authentication feature support? (Choose three.)

  A. cut-through proxy
  B. dot1x
  C. MAB
  D. SSO
  E. web authentication
  B. dot1x
  C. MAB
  E. web authentication

• Question 46:

  Refer to the exhibit.

  

  Which option describes the behavior of this configuration?

  A. The peer session is dropped when 80 prefixes are received.
  B. A warning message is displayed when 1000 prefixes are received.
  C. The peer session is dropped when 800 prefixes are received.
  D. An Initial warning message is displayed when 800 prefixes are received. A different message is displayed when 1000 prefixes received and the session will not be disconnected
  E. An Initial warning message is displayed when 80 prefixes received. The same warning message is displayed when 1000 prefixes are received and the session will be disconnected.
  D. An Initial warning message is displayed when 800 prefixes are received. A different message is displayed when 1000 prefixes received and the session will not be disconnected

• Question 47:

  A firewall rule that filters on the protocol field of an IP packet is acting on which layer of the OSI reference model?

  A. network layer
  B. application layer
  C. transport layer
  D. session layer
  A. network layer

• Question 48:

  Refer to the exhibit.

  

  Which route will be advertised by the Cisco ASA to its OSPF neighbors?

  A. 10.39.23.0/24
  B. 10.40.29.0/24
  C. 10.66.42.215/32
  D. 10.40.29.0/24
  A. 10.39.23.0/24

• Question 49:

  Which three are RFC 5735 addresses? (Choose three.)

  A. 171.10.0.0/24
  B. 0.0.0.0/8
  C. 203.0.113.0/24
  D. 192.80.90.0/24
  E. 172.16.0.0/12
  F. 198.50.100.0/24
  B. 0.0.0.0/8
  C. 203.0.113.0/24
  E. 172.16.0.0/12

• Question 50:

  Which transport type is used by the DHCP protocol?

  A. UDP ports 67 and 69
  B. TCP ports 67 and 68
  C. UDP and TCP port 67
  D. UDP ports 67 and 68
  A. UDP ports 67 and 69