350-018 by Cisco Valid Free Exam Practice Test

Question 1

According to RFC 4890, which four ICMPv6 types are recommended to be allowed to transit a firewall? (Choose four.)

A. Type 8 - echo request B. Type 2 - packet too big C. Type 4 - parameter problem D. Type 0 - echo reply E. Type 1 - destination unreachable F. Type 3 - time exceeded

Correct Answer: B,C,E,F

Question 2

Which option describes the purpose of the RADIUS VAP-ID attribute?

A. It identifies the VLAN interface to which the client will be associated. B. It sets the maximum bandwidth for the connection. C. It sets the minimum bandwidth for the connection. D. It specifies the priority of the client. E. It specifies the WLAN ID of the wireless LAN to which the client belongs. F. It specifies the ACL ID to be matches against the client.

Correct Answer: E

Question 3

You have discovered that a router on your network is experiencing high CPU when management server 10.11.10.12
queries OID IIdpMIB. Assuming management stations access to OID is not critical, what configuration can you apply to
the router to prevent high CPU usage when the OID is queried?
A)

B)

C)

D)

Exhibit A
Exhibit B
Exhibit C
Exhibit D

Correct Answer:

C
https://bst.cloudapps.cisco.com/bugsearch/bug/CSCue32333/?referring_site=bugquickviewredir
3750X CPU spick relates to lldpMIB polling
CSCue32333
Description
Symptom:
We observed a CPU spike on 3750X(12.2(58)SE2 and 15.0.2-SE1), when polling all OID on SNMP server.The high
process is "SNMP ENGINE". We did not see CPU spike after excluded LLDP-MED-MIB lldpMIB.But when polling
lldpMIB only(Did not exclude lldpMIB), we did not see CPU spike either.
Conditions:
3750X-------SNMP server
Workaround:
-----------------------------------
snmp-server view LLDP-MED-MIB iso included
snmp-server view LLDP-MED-MIB lldpMIB excluded
snmp-server community view LLDP-MED-MIB RO 10
-----------------------------------
Further Problem Description:

Question 4

Refer to the exhibit.

Which set of commands is required on an ASA to fix the problem that the exhibit shows?

A. ciscoasa(config)# webvpn
ciscoasa(config-webvpn)# enable <outside-interface-name>
ciscoasa(config)# webvpn B. ciscoasa(config-webvpn)# anyconnect enable
ciscoasa(config)# webvpn C. ciscoasa(config-webvpn)#anyconnect enable
ciscoasa(config-webvpn)#anyconnect image <anyconnect-package-file-location> 1 D. ciscoasa(config-webvpn)#anyconnect enable
ciscoasa(config)# webvpn
ciscoasa(config-webvpn)# enable <outside-interface-name>

Correct Answer: D

Question 5

What applications take advantage of a DTLS protocol?

A. applications that are unable to use TLS B. delay-sensitive applications, such as voice or video C. applications that require double encryption D. point-to-multipoint topology applications

Correct Answer: B

Question 6

Which three statements about the RSA algorithm are true to provide data confidentiality? (Choose three.)

A. The RSA algorithm creates a pair of public-private keys and the public key is shared to perform encryption. B. The RSA algorithm provides authentication but not encryption. C. The public key is used to decrypt the message that was encrypted by the private key. D. The private key is used to decrypt the message that was encrypted by the public key. E. The private key is never shared after it is generated. F. The RSA algorithm provides encryption and authentication.

Correct Answer: A,D,E

Question 7

Which statement about DHCP is true?

A. The DHCPDiscover packet is a broadcast message B. The DHCPOffer packet is sent from the DHCP client C. DHCP uses TCP port 68 and 67 D. The DHCPRequest is a unicast message.

Correct Answer: A

Question 8

What protocol format is illustrated?
Refer to the exhibit.

A. GRE B. IP C. AH D. ESP

Correct Answer: C

Explanation: Only visible for ExamsLabs members. You can sign-up / login (it's free).

Question 9

Which three NAT types support bidirectional traffic initiation? (Choose three.)

A. policy NAT with nat/global B. static NAT C. NAT exemption D. identity NAT E. static PAT

Correct Answer: B,C,E

Cisco CCIE Security Written Exam v4.0 - 350-018 Exam Practice Test