Free Cisco 350-018 Exam Dumps Questions & Answers

Which statement about ACS rule-based policies is true?

• A.Rule-based polices can apply different permission to the same user under different condition
• B.Permission for rule-bases polices are associated with user group.
• C.TACACS+ is one of the attributes included in the authorization profile
• D.The permissions for rule-based policies are defined in authentication profile.

What transport protocol and port are used by GDOI for its IKE sessions that are established between the group
members and the key server?

• A.TCP port 848
• B.SSL port 443
• C.UDP port 4500
• D.ESP port 51
• E.UDP port 848

What feature on the Cisco ASA is used to check for the presence of an up-to-date antivirus vendor on an AnyConnect
client?

• A.Dynamic Access Policies with Host Scan enabled
• B.advanced endpoint assessment
• C.LDAP attribute maps obtained from Antivirus vendor
• D.Dynamic Access Policies with no additional options

Which two statements correctly describe ASA resource management in multiple context mode? (Choose two.)

• A.The class sets the resource maximum limit for a context to which it belongs.
• B.A resource cannot be oversubscribed or set to be unlimited in the class.
• C.The default class provides unlimited access for all the resources.
• D.Context belongs to a default class if not assigned to any other class.
• E.The resource limit can only be set as a percentage in the class and not as an absolute value.

Which three basic security measures are used to harden MSDP? (Choose three.)

• A.MSDP MD5 neighbor authentication
• B.loopback interface as MSDP originator-ID
• C.MSDP neighbor limitation
• D.MSDP SA filters
• E.MSDP state limitation