Download New Updated (Spring 2015) Cisco 351-018 Actual Tests 171-180

Ensurepass    QUESTION 171 Which four protocols are supported by Cisco IOS Management Plane Protection? (Choose four.)   A.      Blocks Extensible Exchange Protocol (BEEP) B.      Hypertext Transfer Protocol Secure (HTTPS) C.      Secure Copy Protocol (SCP) D.      Secure File Transfer Protocol (SFTP) E.       Secure Shell (SSH) F.       Read more [...]

Download New Updated (Spring 2015) Cisco 351-018 Actual Tests 181-190

Ensurepass  QUESTION 181 Which three statements are true about Cryptographically Generated Addresses for IPv6? (Choose three.)   A.      They prevent spoofing and stealing of existing IPv6 addresses. B.      They are derived by generating a random 128-bit IPv6 address based on the public key of the node. C.      They are used for securing neighbor discovery using SeND. D.      SHA or MD5 Read more [...]

Download New Updated (Spring 2015) Cisco 351-018 Actual Tests 161-170

Ensurepass  QUESTION 161 Which three statements are true about the Cisco NAC Appliance solution? (Choose three.)   A.      In a Layer 3 OOB ACL deployment of the Cisco NAC Appliance, the discovery host must be configured as the untrusted IP address of the Cisco NAC Appliance Server. B.      In a Cisco NAC Appliance deployment, the discovery host must be configured on a Cisco router using the "NAC discovery-host" global configuration command. Read more [...]

Download New Updated (Spring 2015) Cisco 351-018 Actual Tests 141-150

Ensurepass  QUESTION 141 Which three statements about LDAP are true? (Choose three.)   A.      LDAP uses UDP port 389 by default. B.      LDAP is defined in terms of ASN.1 and transmitted using BER. C.      LDAP is used for accessing X.500 directory services. D.      An LDAP directory entry is uniquely identified by its DN. E.       A secure connection via TLS Read more [...]

Download New Updated (Spring 2015) Cisco 351-018 Actual Tests 151-160

Ensurepass  QUESTION 151 Refer to the exhibit of an ISAKMP debug. Which message of the exchange is failing?     A.      main mode 1 B.      main mode 3 C.      aggressive mode 1 D.      main mode 5 E.       aggressive mode 2   Correct Answer: B     QUESTION 152 Which Cisco IPS appliance feature can automatically adjust the risk rating of Read more [...]

Download New Updated (Spring 2015) Cisco 351-018 Actual Tests 121-130

Ensurepass  QUESTION 121 Which two options best describe the authorization process as it relates to network access? (Choose two.)   A.      the process of identifying the validity of a certificate, and validating specific fields in the certificate against an identity store B.      the process of providing network access to the end user C.      applying enforcement controls, such as downloadable ACLs and VLAN assignment, Read more [...]

Download New Updated (Spring 2015) Cisco 351-018 Actual Tests 131-140

Ensurepass  QUESTION 131 Which multicast routing mechanism is optimal to support many-to-many multicast applications?   A.      PIM-SM B.      MOSPF C.      DVMRP D.      BIDIR-PIM E.       MSDP   Correct Answer: D     QUESTION 132 Which three statements regarding VLANs are true? (Choose three.)   A.      To create Read more [...]

Download New Updated (Spring 2015) Cisco 351-018 Actual Tests 111-120

Ensurepass  QUESTION 111 What type of attack consists of injecting traffic that is marked with the DSCP value of EF into the network?   A.      brute-force attack B.      QoS marking attack C.      DHCP starvation attack D.      SYN flood attack   Correct Answer: B     QUESTION 112 Which statement is true regarding Cisco ASA operations using software versions 8.3 and later? Read more [...]

Download New Updated (Spring 2015) Cisco 351-018 Actual Tests 91-100

Ensurepass  QUESTION 91 Which three statements are true about PIM-SM operations? (Choose three.)   A.      PIM-SM supports RP configuration using static RP, Auto-RP, or BSR. B.      PIM-SM uses a shared tree that is rooted at the multicast source. C.      Different RPs can be configured for different multicast groups to increase RP scalability. D.      Candidate RPs and RP mapping agents Read more [...]

Download New Updated (Spring 2015) Cisco 351-018 Actual Tests 101-110

Ensurepass  QUESTION 101 Which three nonproprietary EAP methods do not require the use of a client-side certificate for mutual authentication? (Choose three.)   A.      LEAP B.      EAP-TLS C.      PEAP D.      EAP-TTLS E.       EAP-FAST   Correct Answer: CDE     QUESTION 102 When you compare WEP to WPA (not WPA2), which three protections are gained? Read more [...]

Download New Updated (Spring 2015) Cisco 351-018 Actual Tests 61-70

Ensurepass  QUESTION 61 Refer to the exhibit. Which statement best describes the problem?     A.      Context vpn1 is not inservice. B.      There is no gateway that is configured under context vpn1. C.      The config has not been properly updated for context vpn1. D.      The gateway that is configured under context vpn1 is not inservice.   Correct Answer: A     QUESTION Read more [...]

Download New Updated (Spring 2015) Cisco 351-018 Actual Tests 71-80

Ensurepass  QUESTION 71 With the Cisco FlexVPN solution, which four VPN deployments are supported? (Choose four.)   A.      site-to-site IPsec tunnels? B.      dynamic spoke-to-spoke IPSec tunnels? (partial mesh) C.      remote access from software or hardware IPsec clients? D.      distributed full mesh IPsec tunnels? E.       IPsec group encryption using GDOI? Read more [...]

Download New Updated (Spring 2015) Cisco 351-018 Actual Tests 81-90

Ensurepass  QUESTION 81 Which of the following provides the features of route summarization, assignment of contiguous blocks of addresses, and combining routes for multiple classful networks into a single route?   A.      classless interdomain routing B.      route summarization C.      supernetting D.      private IP addressing   Correct Answer: A     QUESTION 82 Aggregate Read more [...]

Download New Updated (Spring 2015) Cisco 351-018 Actual Tests 41-50

Ensurepass  QUESTION 41 Which Cisco ASA feature can be used to update non-compliant antivirus/antispyware definition files on an AnyConnect client?   A.      dynamic access policies B.      dynamic access policies with Host Scan and advanced endpoint assessment C.      Cisco Secure Desktop D.      advanced endpoint assessment   Correct Answer: B     QUESTION 42 Refer to the Read more [...]

Download New Updated (Spring 2015) Cisco 351-018 Actual Tests 51-60

Ensurepass  QUESTION 51 Troubleshooting the web authentication fallback feature on a Cisco Catalyst switch shows that clients with the 802.1X supplicant are able to authenticate, but clients without the supplicant are not able to use web authentication. Which configuration option will correct this issue?   A.      switch(config)# aaa accounting auth-proxy default start-stop group radius B.      switch(config-if)# authentication host-mode Read more [...]

Download New Updated (Spring 2015) Cisco 351-018 Actual Tests 21-30

Ensurepass  QUESTION 21 DNSSEC was designed to overcome which security limitation of DNS?   A.      DNS man-in-the-middle attacks B.      DNS flood attacks C.      DNS fragmentation attacks D.      DNS hash attacks E.       DNS replay attacks F.       DNS violation attacks   Correct Answer: A     QUESTION 22 Which Read more [...]

Download New Updated (Spring 2015) Cisco 351-018 Actual Tests 31-40

Ensurepass  QUESTION 31 Which three security features were introduced with the SNMPv3 protocol? (Choose three.)   A.      Message integrity, which ensures that a packet has not been tampered with in-transit B.      DoS prevention, which ensures that the device cannot be impacted by SNMP buffer overflow C.      Authentication, which ensures that the message is from a valid source D.      Authorization, Read more [...]

Download New Updated (Spring 2015) Cisco 351-018 Actual Tests 11-20

Ensurepass  QUESTION 11 Which two address translation types can map a group of private addresses to a smaller group of public addresses? (Choose two.)   A.      static NAT B.      dynamic NAT C.      dynamic NAT with overloading D.      PAT E.       VAT   Correct Answer: CD     QUESTION 12 Which authentication mechanism is available to OSPFv3? Read more [...]