This page was exported from Easily Pass By Training Lead2pass Latest Dumps [ https://www.freebraindump.com ]
Export date: Fri Mar 29 8:59:16 2024 / +0000 GMT

Passed Cisco 350-018 Exam with Pass4sure and Lead2pass PDF & VCE (141-150)



QUESTION 141

Which of the following describes the DHCP "starvation" attack?

A.    Exhaust the address space available on the DHCP servers so that an attacker can inject their

own DHCP server for malicious reasons.

B.    Saturate the network with DHCP requests to prevent other network services from working.

C.    Inject a DHCP server on the network for the purpose of overflowing DNS servers with bogus learned

host names.

D.    Send DHCP response packets for the purpose of overloading CAM tables.

Answer: A

QUESTION 142

Which Cisco technology protects against Spanning Tree Protocol manipulation?

A.    spanning-tree protection

B.    root guard and BPDU guard

C.    Unicast Reverse Path Forwarding

D.    MAC spoof guard

E.    port security

Answer: B

QUESTION 143

Refer to the exhibit. Which two statements about this Cisco Catalyst switch configuration are correct? (Choose two.)

image

A.    The default gateway for VLAN 200 should be attached to the FastEthernet 5/1 interface.

B.    Hosts attached to the FastEthernet 5/1 interface can communicate only with hosts attached to

the FastEthernet 5/4 interface.

C.    Hosts attached to the FastEthernet 5/2 interface can communicate with hosts attached to the

FastEthernet 5/3 interface.

D.    Hosts attached to the FastEthernet 5/4 interface can communicate only with hosts attached to

the FastEthernet 5/2 and FastEthernet 5/3 interfaces.

E.    Interface FastEthernet 5/1 is the community port.

F.    Interface FastEthernet 5/4 is the isolated port.

Answer: BC

QUESTION 144

Which three configuration components are required to implement QoS policies on Cisco routers using MQC? (Choose three.)

A.    class-map

B.    global-policy

C.    policy-map

D.    service-policy

E.    inspect-map

Answer: ACD

QUESTION 145

Which type of PVLAN ports can communicate among themselves and with the promiscuous port?

A.    isolated

B.    community

C.    primary

D.    secondary

E.    protected

Answer: B

QUESTION 146

Which statement is true about the Cisco NEAT 802.1X feature?

A.    The multidomain authentication feature is not supported on the authenticator switch interface.

B.    It allows a Cisco Catalyst switch to act as a supplicant to another Cisco Catalyst authenticator switch.

C.    The supplicant switch uses CDP to send MAC address information of the connected host to the authenticator

switch.

D.    It supports redundant links between the supplicant switch and the authenticator switch.

Answer: B

QUESTION 147

Which additional configuration component is required to implement a MACSec Key Agreement policy on user-facing Cisco Catalyst switch ports?

A.    PKI

B.    TACACS+

C.    multi-auth host mode

D.    port security

E.    802.1x

Answer: E

QUESTION 148

Which option correctly describes the security enhancement added for OSPFv3?

A.    The AuType field in OSPFv3 now supports the more secure SHA-1 and SHA-2 algorithms in addition

to MD5.

B.    The AuType field is removed from the OSPFv3 header since simple password authentication is no

longer an option.

C.    The Authentication field in OSPFv3 is increased from 64 bits to 128 bits to accommodate more secure

authentication algorithms.

D.    Both the AuType and Authentication fields are removed from the OSPF header in OSPFv3, since now

it relies on the IPv6 Authentication Header (AH) and IPv6 Encapsulating Security Payload (ESP) to

provide integrity, authentication, and/or confidentiality.?

E.    The Authentication field is removed from the OSPF header in OSPFv3, because OSPFv3 must only

run inside of an authenticated IPSec tunnel.

Answer: D

QUESTION 149

Which IPv6 tunnel type is a standard that is defined in RFC 4214?

A.    ISATAP

B.    6to4

C.    GREv6

D.    manually configured

Answer: A

QUESTION 150

What IP protocol number is used in the protocol field of an IPv4 header, when IPv4 is used to tunnel IPv6 packets?

A.    6

B.    27

C.    41

D.    47

E.    51

Answer: C

If you want to pass Cisco 350-018 successfully, donot missing to read latest lead2pass Cisco 350-018 practice exams.

If you can master all lead2pass questions you will able to pass 100% guaranteed.

http://www.lead2pass.com/350-018.html

 

 


Post date: 2014-04-18 02:56:33
Post date GMT: 2014-04-18 02:56:33
Post modified date: 2014-05-27 08:22:27
Post modified date GMT: 2014-05-27 08:22:27

Powered by [ Universal Post Manager ] plugin. MS Word saving format developed by gVectors Team www.gVectors.com