Free Cisco 350-018v4 Exam Dumps Questions & Answers

Which three statements are true about the Cisco ASA object configuration below? (Choose three.)
object network vpnclients
range 10.1.100.4 10.1.100.10
object network vpnclients
nat (outside,outside) dynamic interface

• A.  The NAT configuration in the object specifies a PAT rule?
• B.  This configuration requires the command same-security-traffic inter-interface for traffic that matches this NAT rule
  to pass through the Cisco ASA appliance.
• C.  The NAT rule of this object will be placed in Section 1 (Auto-NAT) of the Cisco ASA NAT table?
• D.  Addresses in the range will be assigned during config-mode.
• E.  This configuration is most likely used to provide Internet access to connected VPN clients.

What are two functions that ESMTP application inspection provides when enabled on the ASA? (Choose two.)

• A.  It supports extended SMTP commands, such as ONEX, and VERB.
• B.  it protects the network from SMTP application inspection and phishing attacks
• C.  It scans MAIL and RCPT commands for invalid characters and other anomalies.
• D.  It generates an audit trail when it rejects invalid commands.
• E.  It supports both SMTP and ESMTP sessions.
• F.  It supports private extensions.

Which type of VPN is based on the concept of trusted group members using the GDOI key management protocol?

• A.  DMVPN
• B.  FlexVPN
• C.  MPLS VPN
• D.  EzVPN
• E.  GETVPN
• F.  SSLVPN

Refer to the exhibit.

What is the cause of the issue that is reported in this debug output?

• A.  The identity of the peer is not acceptable.
• B.  There are mismatched ACLs on remote and local peers.
• C.  The SA lifetimes are set to 0.
• D.  There is an esp transform mismatch.

Which four Cisco IOS features are used to implement First Hop Security in IPv6? (Choose four.)

• A.  IPv6 Device Tracking
• B.  IPv6 Selective Packet Discard
• C.  IPv6 Source Guard
• D.  IPv6 First-Hop Security Binding Table
• E.  IPv6 RA Guard
• F.  SeND