Exit demo 351-018 CCIE Security written PDF format · free preview

Cisco 351-018 - Questions & Answers

Free preview · every answer includes a full explanation

Product page: https://prepkeys.com/351-018.html

Question 1
Multiple choice

In order to reassemble IP fragments into a complete IP datagram, which three IP header fields are referenced by the receiver? (Choose three.)

A.

don't fragment flag

B.

packet is fragmented flag

C.

IP identification field

D.

more fragment flag

E.

number of fragments field

F.

fragment offset field

Question 2
Single choice

Which VTP mode allows the Cisco Catalyst switch administrator to make changes to the VLAN configuration that only affect the local switch and are not propagated to other switches in the VTP domain?

A.

transparent

B.

server

C.

client

D.

local

E.

pass-through

Question 3
Single choice

Which type of VPN is based on the concept of trusted group members using the GDOI key management protocol?

A.

DMVPN

B.

SSLVPN

C.

GETVPN

D.

EzVPN

E.

MPLS VPN

F.

FlexVPN

Question 4
Single choice

Based on RFC 4890, what is the ICMP type and code that should never be dropped by the firewall to allow PMTUD?

A.

ICMPv6 Type 1 Code 0 no route to host

B.

ICMPv6 Type 1 Code 1 communication with destination administratively prohibited

C.

ICMPv6 Type 2 Code 0 packet too big

D.

ICMPv6 Type 3 Code 1 fragment reassembly time exceeded

E.

ICMPv6 Type 128 Code 0 echo request

F.

ICMPv6 Type 129 Code 0 echo reply

Question 5
Single choice

A firewall rule that filters on the protocol field of an IP packet is acting on which layer of the OSI reference model?

A.

network layer

B.

application layer

C.

transport layer

D.

session layer

Question 6
Single choice

Which layer of the OSI model is referenced when utilizing http inspection on the Cisco ASA to filter Instant Messaging or Peer to Peer networks with the Modular Policy Framework?"

A.

application layer

B.

presentation layer

C.

network layer

D.

transport layer

Question 7
Single choice

When a Cisco IOS Router receives a TCP packet with a TTL value less than or equal to 1, what will it do?

A.

Route the packet normally

B.

Drop the packet and reply with an ICMP Type 3, Code 1 (Destination Unreachable, Host Unreachable)

C.

Drop the packet and reply with an ICMP Type 11, Code 0 (Time Exceeded, Hop Count Exceeded)

D.

Drop the packet and reply with an ICMP Type 14, Code 0 (Timestamp Reply)

Question 8
Single choice

In an 802.11 WLAN, which option is the Layer 2 identifier of a basic service set, and also is typically the MAC address of the radio of the access point?

A.

BSSID

B.

SSID

C.

VBSSID

D.

MBSSID

Question 9
Single choice

What term describes an access point which is detected by your wireless network, but is not a

A.

rogue

B.

unclassified

C.

interferer

D.

malicious

Question 10
Single choice

A router has four interfaces addressed as 10.1.1.1/24, 10.1.2.1/24, 10.1.3.1/24, and 10.1.4.1/24.

What is the smallest summary route that can be advertised covering these four subnets?

A.

10.1.2.0/22

B.

10.1.0.0/22

C.

10.1.0.0/21

D.

10.1.0.0/16

Showing 10 of 420 questions · Unlock the full set