Ensurepass

QUESTION 141

Which three statements about LDAP are true? (Choose three.)

 

A.

LDAP uses UDP port 389 by default.

B.

LDAP is defined in terms of ASN.1 and transmitted using BER.

C.

LDAP is used for accessing X.500 directory services.

D.

An LDAP directory entry is uniquely identified by its DN.

E.

A secure connection via TLS is established via the UseTLS operation.

 

Correct Answer: BCD

 

 

 

 

QUESTION 142

Which two EAP methods may be susceptible to offline dictionary attacks? (Choose two.)

 

A.

EAP-MD5

B.

LEAP

C.

PEAP with MS-CHAPv2

D.

EAP-FAST

 

Correct Answer: AB

 

 

QUESTION 143

Which PKCS is invoked during IKE MM5 and MM6 when digital certificates are used as the authentication method?

 

A.

PKCS#7

B.

PKCS#10

C.

PKCS#13

D.

PKCS#11

E.

PKCS#3

 

Correct Answer: A

 

 

QUESTION 144

Which three features describe DTLS protocol? (Choose three.)

 

A.

DTLS handshake does not support reordering or manage loss packets.

B.

DTLS provides enhanced security, as compared to TLS.

C.

DTLS provides block cipher encryption and decryption services.

D.

DTLS is designed to prevent man-in-the-middle attacks, message tampering, and message forgery.

E.

DTLS is used by application layer protocols that use UDP as a transport mechanism.

F.

DTLS does not support replay detection.

 

Correct Answer: CDE

 

 

QUESTION 145

Which statement regarding TFTP is not true?

 

A.

Communication is initiated over UDP port 69.

B.

Files are transferred using a secondary data channel.

C.

Data is transferred using fixed-size blocks.

D.

TFTP authentication information is sent in clear text.

E.

TFTP is often utilized by operating system boot loader procedures.

F.

The TFTP protocol is implemented by a wide variety of operating systems and network devices.

 

Correct Answer: D

 

 

 

 

QUESTION 146

User A at Company A is trying to transfer files to Company B, using FTP. User A can connect to the FTP server at Company B correctly, but User A cannot get a directory listing or upload files.

The session hangs. What are two possible causes for this problem? (Choose two.)

 

A.

Active FTP is being used, and the firewall at Company A is not allowing the returning data connection to be initiated from the FTP server at Company

B.

B. Passive FTP is being used, and the firewall at Company A is not allowing the returning data connection to be initiated from the FTP server at Company B.

C.

At Company A, active FTP is being used with a non-application aware firewall applying NAT to the source address of User A only.

D.

The FTP server administrator at Company B has disallowed User A from accessing files on that server.

E.

Passive FTP is being used, and the firewall at Company B is not allowing connections through to port 20 on the FTP server.

 

Correct Answer: AC

 

 

QUESTION 147

Which three new capabilities were added to HTTP v1.1 over HTTP v1.0? (Choose three.)

 

A.

chunked transfer encoding

B.

HTTP pipelining

C.

POST method

D.

HTTP cookies

E.

keepalive mechanism

 

Correct Answer: ABE

 

 

QUESTION 148

Which three Cisco security product features assist in preventing TCP-based man-in-the-middle attacks? (Choose three.)

 

A.

Cisco ASA TCP initial sequence number randomization?

B.

Cisco ASA TCP sliding-window conformance validation?

C.

Cisco IPS TCP stream reassembly?

D.

Cisco IOS TCP maximum segment size adjustment?

 

Correct Answer: ABC

 

 

QUESTION 149

Which would be the best method to deploy on a Cisco ASA to detect and prevent viruses and worms?

 

A.

deep packet inspection

B.

content security via the Control Security Services Module

C.

Unicast Reverse Path Forwarding

D.

IP audit signatures

 

Correct Answer: B

QUESTION 150

Which four IPv6 messages should be allowed to transit a transparent firewall? (Choose four.)

 

A.

router solicitation with hop limit = 1

B.

router advertisement with hop limit = 1

C.

neighbor solicitation with hop limit = 255

D.

neighbor advertisement with hop limit = 255

E.

listener query with link-local source address

F.

listener report with link-local source address

 

Correct Answer: CDEF

 

Free VCE & PDF File for Cisco 350-018 Practice Tests

Instant Access to Free VCE Files: CCNA | CCNP | CCIE …
Instant Access to Free PDF Files: CCNA | CCNP | CCIE …

Comments are closed.