[Free] Download New Updated (October 2016) Cisco 350-018 Real Exam 421-430

Ensurepass

QUESTION 421

Which statement about layer-2 VLAN is true?

 

A.

VLAN cannot be routed.

B.

VLANs 1006 through 4094 are not propagated by VTP version 3.

C.

VLAN1 is a Cisco default VLAN that can be deleted.

D.

The extended-range VLANs cannot be configured in global configuration mode.

 

Correct Answer: A

 

 

QUESTION 422

Which two statements abou
t the OSPF authentication configuration are true? (Choose two.)

 

A.

OSPF authentication is required in area 0.

B.

There are three types of OSPF authentication options available.

C.

In MD5 authentication, the password is encrypted when it is sent.

D.

Null authentication includes the password in clear-text.

E.

Type-3 authentication is a clear-text password authentication.

F.

In MD5 authentication, the password never goes across the network.

 

Correct Answer: BF

 

 

QUESTION 423

Which statement about DH group is true?

 

A.

The DH group does not provide data authentication.

B.

The DH group is used to provide data confidentiality.

C.

The DH group is used to establish a shared key over a secured medium.

D.

The DH group is negotiated in IPsec phase-2.

 

Correct Answer: A

 

 

QUESTION 424

Refer to the exhibit. Which two items are not encrypted by ESP in tunnel mode? (Choose two)

 

clip_image002

 

A.

ESP header

B.

ESP trailer

C.

Original IP header

D.

Data

E.

TCP-UDP header

F.

Authentication Data

 

Correct Answer: AF

 

 

QUESTION 425

Which statement about DHCP is true?

 

A.

DHCP uses TCP port 68 and 67

B.

The DHCPDiscover packet is a broadcast message

C.

The DHCPRequest is a unicast message.

D.

The DHCPOffer packet is sent from the DHCP client

 

Correct Answer: B

 

 

 

 

 

 

 

QUESTION 426

Refer to the exhibit. Which item is not authenticated by ESP in tunnel mode?

 

clip_image003

 

A.

ESP header

B.

ESP trailer

C.

New IP header

D.

Original IP header

E.

Data

F.

TCP-UDP header

 

Correct Answer: C

 

 

QUESTION 427

Which three statements about SMTP are true? (Choose three.)

 

A.

SMTP uses TCP port 25.

B.

The POP protocol is used by the SMTP client to manage stored mail.

C.

The IMAP protocol is used by the SMTP client to send email.

D.

The mail delivery agent in the SMTP architecture is responsible for DNS lookup.

E.

SMTPS uses SSL and TLS.

F.

SMTP uses TCP port 587.

 

Correct Answer: AEF

 

 

 

 

 

QUESTION 428

Which statement about DNS is true?

 

A.

The client-server architecture is based on push-pull messages.

B.

Query and response messages have different format.

C.

In the DNS message header, the QR flag set to 1 indicates a query.

D.

In the DNS header, an Opcode value of 2 represents a server status request.

E.

In the DNS header, the Rcode value is set to 0 for format error.

 

Correct Answer: D

 

 

QUESTION 429

Which statement about Infrastructure ACLs on Cisco IOS software is true?

 

A.

Infrastructure ACLs are used to protect the device forwarding path.

B.

Infrastructure ACLs are used to protect device management and internal link addresses.

C.

Infrastructure ACLs are used to authorize the transit traffic.

D.

Infrastructure ACLs only protect device physical management interface.

 

Correct Answer:
B

 

 

QUESTION 430

In traceroute, which ICMP message indicates the packet is dropped by a router in the path?

 

A.

Type 3, Code 3

B.

Type 11, Code 0

C.

Type 5, Code 1

D.

Type 3, Code 1

E.

Type 11, Code 1

 

Correct Answer: B

 

Free VCE & PDF File for Cisco 350-018 Real Exam

Instant Access to Free VCE Files: CCNA | CCNP | CCIE …
Instant Access to Free PDF Files: CCNA | CCNP | CCIE …