Online Access Free 350-018 Practice Test

What is the first step in performing a risk assessment?

• A.Evaluating the effectiveness and appropriateness of the organization's current risk-management activities.
• B.Terminating any employee believed to be responsible for compromising security.
• C.Establishing a security team to perform forensic examinations of previous known attacks.
• D.Investigating reports of data theft or security breaches and assigning responsibility.
• E.Identifying critical services and network vulnerabilities and determining the potential impact of their compromise
  or failure.

Which two statements about MPP (Management Plane Protection) are true? (Choose two.)

• A.Only in-band management interfaces are supported
• B.Only out-of-band management interfaces are supported
• C.It is supported on both active and standby management interfaces.
• D.It is supported on both distributed and hardware-switched platforms
• E.Only virtual interfaces associated with sub-interfaces are supported
• F.Only virtual interfaces associated with physical interfaces are supported

Which item is not encrypted by ESP?

• A.TCP-UDP header
• B.ESP header
• C.ESP trailer
• D.Data
• E.IP header

Which two of the following pieces of information are communicated by the ASA in version 8.4 or later when the
Stateful Failover is enabled? (Choose two.)

• A.NAT translation table
• B.power status
• C.DHCP server address leases.
• D.user authentication
• E.dynamic routing tables

IKEv2 provides greater network attack resiliency against a DoS attack than IKEv1 by utilizing which two functionalities?
(Choose two)

• A.With cookie challenge, IKEv2 does not track the state of the initiator until the initiator responds with a cookie.
• B.An IKEv2 responder does not initiate a DH exchange until the initiator responds with a cookie.
• C.IKEv2 only allows certificates for peer authentication.
• D.IKEv2 interoperates with IKEv1 to increase security in IKEv1.
• E.IKEv2 performs TCP intercept on all secure connections.
• F.IKEv2 only allows symmetric keys for peer authentication.