Cisco 351-018 Online Practice Questions and Exam Preparation

Cisco 351-018 Online Questions & Answers

• Question 71:

  What is needed to verify a digital signature that was created using an RSA algorithm?

  A. public key
  B. private key
  C. both public and private key
  D. trusted third-party certificate
  A. public key

• Question 72:

  What are two reasons for a certificate to appear in a CRL? (Choose two.)

  A. CA key compromise
  B. cessation of operation
  C. validity expiration
  D. key length incompatibility
  E. certification path invalidity
  A. CA key compromise
  B. cessation of operation

• Question 73:

  Which three statements about the RSA algorithm are true? (Choose three.)

  A. The RSA algorithm provides encryption but not authentication.
  B. The RSA algorithm provides authentication but not encryption.
  C. The RSA algorithm creates a pair of public-private keys that are shared by entities that perform encryption.
  D. The private key is never sent across after it is generated.
  E. The public key is used to decrypt the message that was encrypted by the private key.
  F. The private key is used to decrypt the message that was encrypted by the public key.
  C. The RSA algorithm creates a pair of public-private keys that are shared by entities that perform encryption.
  D. The private key is never sent across after it is generated.
  F. The private key is used to decrypt the message that was encrypted by the public key.

• Question 74:

  The Wi-Fi Alliance defined two certification programs, called WPA and WPA2, which are based on the IEEE 802.11i standard. Which three statements are true about these certifications? (Choose three.)

  A. WPA is based on the ratified IEEE 802.11i standard.
  B. WPA2 is based on the ratified IEEE 802.11i standard.
  C. WPA enhanced WEP with the introduction of TKIP.
  D. WPA2 requires the support of AES-CCMP.
  E. WPA2 supports only 802.1x/EAP authentication.
  B. WPA2 is based on the ratified IEEE 802.11i standard.
  C. WPA enhanced WEP with the introduction of TKIP.
  D. WPA2 requires the support of AES-CCMP.

• Question 75:

  What is the commonly known name for the process of generating and gathering initialization vectors, either passively or actively, for the purpose of determining the security key of a wireless network?

  A. WEP cracking
  B. session hijacking
  C. man-in-the-middle attacks
  D. disassociation flood frames
  A. WEP cracking

• Question 76:

  Which two statements are true when comparing ESMTP and SMTP? (Choose two.)

  A. Only SMTP inspection is provided on the Cisco ASA firewall.
  B. A mail sender identifies itself as only able to support SMTP by issuing an EHLO command to the mail server.
  C. ESMTP mail servers will respond to an EHLO with a list of the additional extensions they support.
  D. SMTP commands must be in upper case, whereas ESMTP can be either lower or upper case.
  E. ESMTP servers can identify the maximum email size they can receive by using the SIZE command.
  C. ESMTP mail servers will respond to an EHLO with a list of the additional extensions they support.
  E. ESMTP servers can identify the maximum email size they can receive by using the SIZE command.

• Question 77:

  Which statement is true about an SNMPv2 communication?

  A. The whole communication is not encrypted.
  B. Only the community field is encrypted.
  C. Only the query packets are encrypted.
  D. The whole communication is encrypted.
  A. The whole communication is not encrypted.

• Question 78:

  class-map nbar_rtp

  match protocol rtp payload-type "0, 1, 4 - 0x10, 10001b - 10010b, 64"

  The above NBAR configuration matches RTP traffic with which payload types?

  A. 0, 1, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13, 14, 15, 16, 17, 18, 64
  B. 0, 1, 4, 5, 6, 7, 8, 9, 10
  C. 0, 1, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13, 14, 15, 16, 17, 18, 19, 64
  D. 0, 1, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13, 14, 64
  A. 0, 1, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13, 14, 15, 16, 17, 18, 64

• Question 79:

  Refer to the exhibit.

  

  Which option describes the behavior of this configuration?

  A. Devices that perform IEEE 802.1X should be in the MAC address database for successful authentication.
  B. IEEE 802.1x devices must fail MAB to perform IEEE 802.1X authentication.
  C. If 802.1X fails, the device will be assigned to the default guest VLAN.
  D. The device will perform subsequent IEEE 802.1X authentication if it passed MAB authentication.
  E. If the device fails IEEE 802.1X, it will start MAB again.
  B. IEEE 802.1x devices must fail MAB to perform IEEE 802.1X authentication.

• Question 80:

  If an incoming packet from the outside interface does not match an existing connection in the connection table, which action will the Cisco ASA appliance perform next?

  A. drop the packet
  B. check the outside interface inbound ACL to determine if the packet is permitted or denied
  C. perform NAT operations on the packet if required
  D. check the MPF policy to determine if the packet should be passed to the SSM
  E. perform stateful packet inspection based on the MPF policy
  B. check the outside interface inbound ACL to determine if the packet is permitted or denied