Examcollection 350-018 Dumps

1
http//www.examcollectionvce.com/vce-350-018.html
http//www.examcollectionvce.com/vce-350-018.html
2
QUESTION 1

• Which of the following statements are true
  regarding hashing? (Choose two)
• Changing 1 bit of the input SHA-1 changes 1 bit
  of the output.
• SHA-1 is stronger than MD5 because it can be used
  with a key to prevent modification.
• MD5 produces a 160-bit result.
• MD5 takes more CPU cycles to compute than SHA-1.
• SHA-256 is an extension to SHA-1 with a longer
  output.

Answer B, E
QUESTION 2

• Which four of these attacks or wireless tools can
  the standard IDS signatures on a wireless LAN
  controller detect? (Choose four.)
• long HTTP request
• SYN flood
• Deauthorization flood
• NetStumbler
• Wellenreiter
• Association flood
• AirSnort
• Fragment Overlap attack

Answer C, D,E, G
3
QUESTION 3

• What Cisco IOS feature prevents an attacker from
  filling up the MTU cache for locally generated
  traffic when using path MTU discovery?
• Use NetFlow information to export data to a
  workstation.
• Force all traffic to send 1280-byte Packets by
  hard coding the MSS.
• Enable flow-label marking to track packet
  destination.
• Enable flow-label switching to track IPv6 packets
  in the MPLS cloud.
• Always use packets of 1500-byte size or larger

Answer C
QUESTION 4

• What technology can you implement on your network
  to allow Independent applications to work with
  IPv6-capable applications?
• DS-Lite
• NAT-PT
• ISATAP
• NAT 6to4
• NAT64

Answer E
QUESTION 5

• Which three of these statements about a
  zone-based policy firewall are correct? (Choose
  three.)
• An interface can be assigned to only one security
  zone.
• By default, all traffic to and from an interface
  that belongs to a security zone is dropped
  unless explicitly allowed in the zone-pair
  policy.
• Firewall policies, such as the pass, inspect, and
  drop actions, can only be applied between two
  zones.

4

1. In order to pass traffic between two interfaces
   that belong to the same security zone, you must
   configure a pass action using class-default.
2. Traffic cannot flow between a zone member
   interface and any interface that is not a zone
   member.

Answer A, C, E
QUESTION 6

• Which two statements about 802.1x authentication
  with port security are true? (Choose two.)
• A. If any client causes a security violation, the
  port is immediately placed in spanning-tree
  disabled mode. B. An entry is created in the
  secure host table for any client that is
  authenticated and manually configured for port
  security, even if the table is full.
• 802.1x manages network access for all authorized
  MAC addresses.
• If a client is authenticated and the port
  security table is full, the oldest client is aged
  out.
• If any host causes a security violation, the port
  is immediately error-disabled.

Answer B, E
QUESTION 7

• If an ASA device is configured as a remote access
  IPsec server with RADIUS authentication and
  password management enabled, which type of
  authentication will it use?
• MS-CHAFV2
• MS-CHAPv1
• RSA
• NTLM
• PAP

Answer E
5
QUESTION 8

• What SNMPv3 command disables descriptive error
  messages?
• snmp-server usm Cisco
• snmp-server ifindex persist
• snmp-server trap link switchover
• snmp-server inform

Answer A
QUESTION 9

• Which statement about SNMP control plane policing
  is true?
• The SNMP management plane always has a source IP
  address
• SNMP traffic is processed via CEF in the data
  plane.
• The CoPP SNMP feature can forward and manage
  traffic during heavy traffic load.
• SNMP traps are processed by the data plane.

.
Answer C
QUESTION 10

• What are two actions you can take to Protect
  against DDoS attacks on Cisco routers and
  switches? (Choose two.)
• Implement MAC address filtering.
• Filter the RFC 1918 address space.
• Configure PIM-SM.
• Rate limit SYN packets.
• Configure IP snooping.

Answer B, D
6
100 Money Back Guarantee
100 Latest Examcollection
100 Exam Passing Guarantee
Answers verified By Experts
Full Course coverage
7
Complete file from here http//www.examcollectio
nvce.com/vce-350-018.html