Free Cisco 350-018 Exam Dumps Questions & Answers

Which configuration is the correct way to change a GET VPN Key Encryption Key lifetime to 10800 seconds on the key
server?

• A.  crypto ipsec profile getvpn-profile
  set security-association lifetime seconds 10800
  !
  crypto gdoi group GET-Group
  identity number 1234
  server local
  sa ipsec 1
  profile getvpn-profile
• B.  crypto isakmp policy 1
  lifetime 10800
• C.  crypto gdoi group GET-Group
  identity number 1234
  server local
  set security-association lifetime seconds 10800
• D.  ?crypto gdoi group GET-Group
  identity number 1234
  server local
  rekey lifetime seconds 10800
• E.  crypto ipsec security-association lifetime? seconds 10800

If a host receives a TCP packet with an SEQ number of 1234, an ACK number of 5678, and a length of 1000 bytes, what
will it send in reply?

• A.  a TCP packet with SEQ number: 5678, and ACK number 2234
• B.  a TCP packet with SEQ number: 1234, and ACK number: 2234
• C.  a TCP packet with SEQ number: 2234, and ACK number: 5678
• D.  a TCP packet with SEQ number: 6678, and ACK number: 1234

Refer to the exhibit.

Which statement best describes the problem?

• A.  Context vpn1 is not inservice.
• B.  There is no gateway that is configured under context vpn1.
• C.  The gateway that is configured under context vpn1 is not inservice.
• D.  The config has not been properly updated for context vpn1.

Which three attributes may be configured as part of the Common Tasks panel of an authorization profile in the Cisco
ISE solution? (Choose three.)

• A.  dACL name
• B.  SGT
• C.  voice VLAN
• D.  voice domain permission
• E.  VLAN

When a host initiates a TCP session, what is the numerical range into which the initial sequence number must fall?

• A.  0 to 65535
• B.  1 to 4,294,967,295
• C.  0 to 4,294,967,295
• D.  1 to 65535
• E.  0 to 1024
• F.  1 to 1024