350-018v4 試験問題を無料オンラインアクセス

Which common Microsoft protocol allows Microsoft machine administration and operates over TCP port 3389?

• A.remote desktop protocol
• B.Tarantella remote desktop
• C.desktop mirroring
• D.desktop shadowing

In Cisco IOS, what is the result of the ip dns spoofing command on DNS queries that are coming from the inside and
are destined to DNS servers on the outside?

• A.The router will act as a proxy to the DNS request and reply to the DNS request with the IP address of the interface
  that received the DNS query if the outside interface is down.
• B.The router will prevent DNS packets without TSIG information from passing through the router.
• C.The router will take the DNS query and forward it on to the DNS server with its information in place of the client IP.
• D.The router will block unknown DNS requests on both the inside and outside interfaces.

crypto isakmp profile vpn1
vrf vpn1
keyring vpn1
match identity address 172.16.1.1 255.255.255.255
crypto map crypmap 1 ipsec-isakmp
set peer 172.16.1.1
set transform-set vpn1
set isakmp-profile vpn1
match address 101
!
interface Ethernet1/2
crypto map crypmap
Which statements apply to the above configuration? (Choose two.)

• A.VRF and ISAKMP profiles are mutually exclusive, so the configuration is invalid.
• B.Peer command under the crypto map is redundant and not required.
• C.This configuration shows the VRF-Aware IPsec feature that is used to map the crypto ISAKMP profile to a specific
  VRF.
• D.An IPsec tunnel can be mapped to a VRF instance.

Which three statements about IKEv2 are correct? (Choose three.)

• A.The IKEv2 standard defines a method for fragmenting large messages.
• B.NAT-T is not supported.
• C.Rekeying IKE and child SAs is facilitated by the IKEv2 CREATE_CHILD_SA exchange.
• D.INITIAL_CONTACT is used to synchronize state between peers.
• E.Attribute policy push (via the configuration payload) is only supported in REQUEST/REPLY mode.
• F.The initial exchanges of IKEv2 consist of IKE_SA_INIT and IKE_AUTH.

Which two features are supported in CBAC on IPv6? (Choose two.)

• A.inspection of tunneled packets in transit
• B.inspection of fragmented packets
• C.inspection of packets on nonstandard ports
• D.inspection of encrypted packets
• E.Intrusion Detection System inspection