350-018 무료 덤프문제 온라인 액세스

Which two statements about the TACACS+ protocol are true? (Choose two.)

• A.VSAs allow products from other vendors to interoperate with Cisco routers that support TACACS+.
• B.TACACS+ combines the authentication and authorization functions.
• C.Because it uses UDP for transport. TACACS+ can detect server crashes out-of-band.
• D.TACACS+ takes advantage of the UDP protocol's connectionless network transport.
• E.The entire body of a TACACS+ packet is encrypted with the exception of the standard clear-text TACACS+ header.
• F.TACACS+ can handle different .AAA services on separate servers.

Which label is advertised by an LSR to inform neighboring LSRs to perform the penultimate hop popping operation?

• A.imp-null
• B.swap
• C.push
• D.php
• E.0x00

crypto isakmp profile vpn1
vrf vpn1
keyring vpn1
match identity address 172.16.1.1 255.255.255.255
crypto map crypmap 1 ipsec-isakmp
set peer 172.16.1.1
set transform-set vpn1
set isakmp-profile vpn1
match address 101
!
interface Ethernet1/2
crypto map crypmap
Which statements apply to the above configuration? (Choose two.)

• A.An IPsec tunnel can be mapped to a VRF instance.
• B.VRF and ISAKMP profiles are mutually exclusive, so the configuration is invalid.
• C.Peer command under the crypto map is redundant and not required.
• D.This configuration shows the VRF-Aware IPsec feature that is used to map the crypto ISAKMP profile to a specific
  VRF.

IPsec SAs can be applied as a security mechanism for which three options? (Choose three.)

• A.Send
• B.LWAPP
• C.site-to-site virtual interfaces
• D.CAPWAP
• E.Mobile IPv6
• F.OSPFv3

What ASA feature can you use to restrict a user to a specific VPN group?

• A.A VPN filter
• B.A Webtype ACL
• C.MPF
• D.group-lock