Take Your Cisco 350-018 All New Questions And Answers Download Guarantee You 100% Pass

Exam A
QUESTION 1
Which two of these Cisco Catalyst security features offer the best ways to prevent ARP cache poisoning? (Choose two.)
A. Dynamic ARP Inspection
B. port security
C. MAC address notification
D. DHCP snooping
E. PortFast
F. 802.1x authentication
Correct Answer: AD
QUESTION 2
Which one of the following is not a valid RADIUS packet type?
A. access-reject
B. access-response
C. access-challenge
D. access-reply
E. access-accept
Correct Answer: B
QUESTION 3
Which two of these statements about SMTP and ESMTP are the most correct? (Choose two.) ActualTests.com
A. Open mail relays are often used for spamming.
B. ESMTP does not provide more security features than SMTP.
C. SMTP provides authenticated e-mail sending.
D. Worms often spread via SMTP.
Correct Answer: AD
QUESTION 4

Refer to the exhibit. Which three of the following statements are correct? (Choose three.)
A. The exhibit shows an example of a NAC Framework network.
B. The exhibit shows an example of a NAC Appliance network.
C. The network utilizes in-band admission control.
D. The network utilizes out-of-band admission control.
E. Cisco NAC Appliance Agent is used to verify end-user PC compliance with the security policy
F. Cisco Trust Agent is used to verify end-user PC compliance with the security policy.
Correct Answer: BCE
QUESTION 5

Referring to the partial debug output shown in the exhibit, which of these values is contained inside the brackets [4] in line 1?
“Pass Any Exam. Any Time.” – www.actualtests.com 3
A. RADIUS identifier field value
B. RADIUSattribute type value
C. RADIUS VSA number
D. RADIUS VSA length
E. vendor ID

Correct Answer: B
QUESTION 6
What is the net effect of using ICMP type 4 messages to attack RFC 1122-compliant hosts?
A. Hosts will perform a soft TCP reset and restart the connection.
B. Hosts will perform a hard TCP reset and tear down the connection.
C. Hosts will reduce the rate at which they inject traffic into the network.
D. Hosts will redirect packets to the IP address indicated in the ICMP type 4message.
E. Hosts will retransmit the last frame sent prior to receiving the ICMP type 4 message.
Correct Answer: C
QUESTION 7

ActualTests.com
Refer to the exhibit. Switch SW2 has just been added to Fa0/23 on SW1. After a few seconds, interface Fa0/23 on SW1 is placed in the error-disabled state. SW2 is removed from port 0/23 and inserted into SWI port Fa0/22 with the same result. What is the most likely cause of this problem?
“Pass Any Exam. Any Time.” – www.actualtests.com 4
A. The spanning-tree PortFast feature has been configured on SW1.
B. BPDU filtering has been enabled either globally or on the interfaces of SW1.
C. The BPDU guard feature has been enabled on the Fast Ethernet interfaces of SW1.
D. The Fast Ethernet interfaces of SW1 are unable to autonegotiate speed and duplex with SW2.
E. PAgP is unable to correctly negotiate VLAN trunk characteristics on the link between SWI and SW2.

Correct Answer: C
QUESTION 8
ASDM on the Cisco ASA adaptive security appliance platform is executed as which of the following?
A. an ActiveX application or a JavaScript application
B. a JavaScript application and a PHP application
C. a fully compiled .Net Framework application
D. a fully operational Visual Basic application
E. a Java applet or a standalone application using the Java Runtime Environment
Correct Answer: D
QUESTION 9
After the client opens the command channel (port 21) to the FTP server and requests passive mode, what will be the next step?
A. The FTP server sends back an ACK to the client.
B. The FTP server allocates a port to use for the data channel and transmits that port number to ActualTests.com the client.
C. The FTP server opens the data channel to the client using the port number indicated by the client.
D. The FTP client opens the data channel to the FTP server on port 20.
E. The FTP client opens the data channel to the FTP server on port 21.
Correct Answer: B
QUESTION 10
In ISO 27001 ISMS, which three of these certification process phases are required to collect information for ISO 27001? (Choose three.)
“Pass Any Exam. Any Time.” – www.actualtests.com 5
A. discover
B. certification audit
C. post-audit
D. observation
E. pre-audit
F. major compliance
Correct Answer: BCE