[Free] Download New Updated (October 2016) Cisco 350-018 Real Exam 361-370

Ensurepass

QUESTION 361

When is the supplicant considered to be clientless?

 

A.

when the authentication server does not have credentials to authenticate.

B.

when the authenticator is missing the dot1x guest VLAN under the port with which the supplicant is connected.

C.

when the supplicant fails EAP-MD5 challenge with the authentication server.

D.

when the supplicant fails to respond to EAPOL messages from the authenticator.

E.

when the authenticator is missing the reauthentication timeout configuration under the port with which the supplicant is connected.

 

Correct Answer: D

 

 

QUESTION 362

Which Cisco IOS IPS signature action denies an attacker session using the dynamic access list?

 

A.

produce-alert

B.

deny-attacker-inline

C.

deny-connection-inline

D.

reset-tcp-action

E.

deny-session-inline

F.

deny-packet-inline

 

Correct Answer: A

 

 

QUESTION 363

Which IPS appliance signature engine inspects IPv6 Layer 3 traffic?

 

A.

Atomic IP

B.

Meta

C.

Atomic IP Advanced

D.

Fixed

E.

Service

 

Correct Answer: C

 

 

QUESTION 364

When routing is configured on ASA, which statement is true?

 

A.

If the default route is not present, then the routing table is checked.

B.

If the routing table has two matching entries, the packet is dropped.

C.

If routing table has two matching entries with same prefix length, the first entry is used.

D.

If routing table has two matching entries with different prefix lengths, the entry with the longer prefix length is used.

 

Correct Answer: D

 

 

QUESTION 365

Which statement about the ASA redundant interface is true?

 

A.

It is a logical interface that combines two physical interfaces, both of which are active.

B.

It can only be used for failover links.

C.

By default, the first physical interface that is configured in the pair is the active interface.

D.

The redundant interface uses the MAC address of the second physical interface in the pair.

 

Correct Answer: C

 

 

QUESTION 366

Which two pieces of information are communicated by the ASA failover link? (Choose two.)

 

A.

unit state

B.

connections State

C.

routing tables

D.

power status

E.

MAC address exchange

 

Correct Answer: AE

 

 

QUESTION 367

When is a connection entry created on ASA for a packet that is received on the ingress interface?

 

A.

When the packet is checked by the access-list.

B.

When the packet reaches the ingress interface internal buffer.

C.

When the packet is a SYN packet or UDP packet.

D.

When a translation rule exists for the packet.

E.

When the packet is subjected to inspection.

 

Correct Answer: D

 

 

QUESTION 368

Which two statements about the multiple context mode running Version 9.x are true? (Choose two.)

 

A.

RIP is not supported.

B.

An interface cannot be shared by multiple contexts.

C.

Remote access VPN is supported.

D.

Only the admin and context configuration files are supported.

E.

OSPFv3 is supported.

F.

Multicast feature is supported

G.

Site-To-Site VPN feature is supported

 

Correct Answer: AG

 

 

QUESTION 369

Which two options describe how the traffic for the shared interface is classified in ASA multi context mode? (Choose two.)

 

A.

Traffic is classified at the source address in the packet.

B.

Traffic is classified at the destination address in the packet.

C.

Traffic is classified at the destination address in the context.

D.

Traffic is classified by copying and sending the packet to all the contexts.

E.

Traffic is classified by sending the MAC address for the shared interface.

 

Correct Answer: CE

 

 

QUESTION 370

Which two statements correctly describes ASA resource management in multiple context mode? (Choose two.)

 

A.

The class sets the resource maximum limit for a context to which it belongs.

B.

A resource cannot be oversubscribed or set to be unlimited in the class.

C.

The resource limit can only be set as a percentage in the class and not as an absolute value.

D.

Context belongs to a default class if not assigned to any other class.

E.

The default class provides unlimited access for all the resources.

 

Correct Answer: AD

 

Free VCE & PDF File for Cisco 350-018 Real Exam

Instant Access to Free VCE Files: CCNA | CCNP | CCIE …
Instant Access to Free PDF Files: CCNA | CCNP | CCIE …