This page was exported from All The Latest MCTS Exam Questions And Answers For Free Share [ https://www.mctsdump.com ]

Export date:Thu Apr 25 15:54:50 2024 / +0000 GMT

___________________________________________________


Title: [Free-Dumps] Download Free PassLeader Premium 366q 400-251 Exam Questions (Question 121 &ndash; Question 150)

---------------------------------------------------


New Updated 400-251 Exam Questions from PassLeader 400-251 PDF dumps! Welcome to download the newest PassLeader 400-251 VCE dumps: http://www.passleader.com/400-251.html (366 Q&amp;As) Keywords: 400-251 exam dumps, 400-251 exam questions, 400-251 VCE dumps, 400-251 PDF dumps, 400-251 practice tests, 400-251 study guide, 400-251 braindumps, CCIE Security Exam p.s. Free 400-251 dumps download from Google Drive: https://drive.google.com/open?id=0B-ob6L_QjGLpd3JLalNVS0VWbms QUESTION 121The computer at 10.10.10.4 on your network has been infected by a botnet that directs traffic to a malware site at 168.65.201.120. Assuming that filtering will be performed on a Cisco ASA. What command can you use to block all current and future connections from the infected host? A.&nbsp;&nbsp;&nbsp; ip access-list extended BLOCK_BOT_OUT deny ip any host 10.10.10.4B.&nbsp;&nbsp;&nbsp; shun 10.10.10.4 168.65.201.120 6000 80C.&nbsp;&nbsp;&nbsp; ip access-list extended BLOCK_BOT_OUT deny ip host 10.10.10.4 host 168.65.201.120D.&nbsp;&nbsp;&nbsp; ip access-list extended BLOCK_BOT_OUT deny ip host 168.65.201.120 host 10.10.10.4E.&nbsp;&nbsp;&nbsp; shun 168.65.201.120 10.10.10.4 6000 80  Answer: C QUESTION 122IKEv2 provide greater network attack resiliency against a DoS attack than IKEv1 by utilizing which two functionalities? (Choose two.) A.&nbsp;&nbsp;&nbsp; with cookie challenge IKEv2 does not track the state of the initiator until the initiator respond with cookieB.&nbsp;&nbsp;&nbsp; Ikev2 perform TCP intercept on all secure connectionsC.&nbsp;&nbsp;&nbsp; IKEv2 only allows symmetric keys for peer authenticationD.&nbsp;&nbsp;&nbsp; IKEv2 interoperates with IKEv1 to increase security in IKEv1E.&nbsp;&nbsp;&nbsp; IKEv2 only allows certificates for peer authenticationF.&nbsp;&nbsp;&nbsp; An IKEv2 responder does not initiate a DH exchange until the initiator responds with a cookie Answer: AF QUESTION 123Which five of these are criteria for rule-based rogue classification of access points by the cisco Wireless LAN controller? (Choose five.) A.&nbsp;&nbsp;&nbsp; MAC address rangeB.&nbsp;&nbsp;&nbsp; MAC address range number of clients it hasC.&nbsp;&nbsp;&nbsp; open authenticationD.&nbsp;&nbsp;&nbsp; whether it matches a user-configured SSIDE.&nbsp;&nbsp;&nbsp; whether it operates on an authorized channelF.&nbsp;&nbsp;&nbsp; minimum RSSIG.&nbsp;&nbsp;&nbsp; time of day the rogue operatesH.&nbsp;&nbsp;&nbsp; Whether it matches a managed AP SSID Answer: BCDFH QUESTION 124Which two statement about the DES algorithm are true? (Choose two.) A.&nbsp;&nbsp;&nbsp; It uses a 64-bit key block size and its effective key length is 65 bitsB.&nbsp;&nbsp;&nbsp; It uses a 64-bits key block size and its effective key length is 56 bitsC.&nbsp;&nbsp;&nbsp; It is a stream cripher that can be used with any size inputD.&nbsp;&nbsp;&nbsp; It is more efficient in software implements than hardware implementationsE.&nbsp;&nbsp;&nbsp; It is vulnerable to differential and linear cryptanalysisF.&nbsp;&nbsp;&nbsp; It is resistant to square attacks Answer: BE QUESTION 125Which three types of addresses can the Botnet Traffic Filter feature of the Cisco ASA monitor? (Choose three.) A.&nbsp;&nbsp;&nbsp; Ambiguous addressesB.&nbsp;&nbsp;&nbsp; Known malware addressesC.&nbsp;&nbsp;&nbsp; Listed addressesD.&nbsp;&nbsp;&nbsp; Dynamic addressesE.&nbsp;&nbsp;&nbsp; Internal addressesF.&nbsp;&nbsp;&nbsp; Known allowed addresses Answer: ABF QUESTION 126Which Three statement about cisco IPS manager express are true? (Choose three.) A.&nbsp;&nbsp;&nbsp; It provides a customizable view of events statistics.B.&nbsp;&nbsp;&nbsp; It Can provision policies based on risk rating.C.&nbsp;&nbsp;&nbsp; It Can provision policies based on signatures.D.&nbsp;&nbsp;&nbsp; It Can provision policies based on IP addresses and ports.E.&nbsp;&nbsp;&nbsp; It uses vulnerability-focused signature to protect against zero-day attacks.F.&nbsp;&nbsp;&nbsp; It supports up to 10 sensors. Answer: ABF QUESTION 127In Cisco Wireless LAN Controller (WLC. which web policy enables failed Layer 2 authentication to fall back to WebAuth authentication with a user name and password? A.&nbsp;&nbsp;&nbsp; On MAC Filter FailureB.&nbsp;&nbsp;&nbsp; Pass throughC.&nbsp;&nbsp;&nbsp; Splash Page Web RedirectD.&nbsp;&nbsp;&nbsp; Conditional Web RedirectE.&nbsp;&nbsp;&nbsp; Authentication Answer: A QUESTION 128Drag and Drop QuestionDrag and drop each syslog facility code on the left onto its description on the right. Answer: QUESTION 129Refer to the exhibit. What is the effect of the given configuration? A.&nbsp;&nbsp;&nbsp; It reset and logs FTP connection to all sites except cisco.com and hp.com.B.&nbsp;&nbsp;&nbsp; FTP connections are unaffected.C.&nbsp;&nbsp;&nbsp; It resets FTP connection to all sites except cisco.com and hp.com.D.&nbsp;&nbsp;&nbsp; It resets and logs FTP connection to cisco.com and hp.com only.E.&nbsp;&nbsp;&nbsp; It resets FPT connection to cisco.com and hp.com only Answer: A QUESTION 130What port has IANA assigned to the GDOI protocol? A.&nbsp;&nbsp;&nbsp; UDP 4500B.&nbsp;&nbsp;&nbsp; UDP 1812C.&nbsp;&nbsp;&nbsp; UDP 500D.&nbsp;&nbsp;&nbsp; UDP 848 Answer: D QUESTION 131Refer to the exhibit, after you implement ingress filter 101 to deny all icmp traffic on your perimeter router user complained of poor web performance and the router and the router display increase CPU load. The debug ipicmp command returned the given output. Which configuration you make to the router configuration to correct the problem? &nbsp;&nbsp;&nbsp;&nbsp;  Answer: D QUESTION 132Which two statements about implementing GDOI in a DMVPN network are true? (Choose two.) A.&nbsp;&nbsp;&nbsp; Direct spoke-to-spoke traffic is black-holed.B.&nbsp;&nbsp;&nbsp; Rekeying requires an exclusive IGMP join in the mGRE interface.C.&nbsp;&nbsp;&nbsp; The crypto map is applied to the sub interface of each spoke.D.&nbsp;&nbsp;&nbsp; If a group member rekey operation fails, it must wait for the SA lifetime to expire before it can reregister with the key server.E.&nbsp;&nbsp;&nbsp; The DMVPN hub can act as the GDOI key server.F.&nbsp;&nbsp;&nbsp; DMVPN spokes with tunnel protection allow traffic to be encrypted to the hub. Answer: DE QUESTION 133For which two reasons BVI is required in the Transparent Cisco IOS Firewall? (Choose two.) A.&nbsp;&nbsp;&nbsp; BVI is required for the inspection of IP traffic.B.&nbsp;&nbsp;&nbsp; The firewall can perform routing on bridged interfaces.C.&nbsp;&nbsp;&nbsp; BVI is required if routing is disabled on the firewall.D.&nbsp;&nbsp;&nbsp; BVI is required if more than two interfaces are in a bridge group.E.&nbsp;&nbsp;&nbsp; BVI is required for the inspection of non-IP traffic.F.&nbsp;&nbsp;&nbsp; BVI can manage the device without having an interface that is configured for routing. Answer: DF QUESTION 134Drag and Drop QuestionDrag each step in the configuration of a cisco ASA NSEL export to a NETFLOW collector on the left into the correct order of operations on the right. Answer: QUESTION 135Which two u.s government entities are authorized to execute and enforce the penalties for violations of the Sarbanes-oxley(SOX) act? (Choose two.) A.&nbsp;&nbsp;&nbsp; Federal trade commission (FTC)B.&nbsp;&nbsp;&nbsp; Internal Revenue service (IRS)C.&nbsp;&nbsp;&nbsp; Office of Civil Rights (OCR)D.&nbsp;&nbsp;&nbsp; Federal Reserve Board (FRB)E.&nbsp;&nbsp;&nbsp; Securities and exchange commission (SEC)F.&nbsp;&nbsp;&nbsp; United states Citizenship and immigration services (USCIS) Answer: DE QUESTION 136MWhich three are RFC 5735 addresses? (Choose three.) A.&nbsp;&nbsp;&nbsp; 171.10.0.0/24B.&nbsp;&nbsp;&nbsp; 0.0.0.0/8C.&nbsp;&nbsp;&nbsp; 203.0.113.0/24D.&nbsp;&nbsp;&nbsp; 192.80.90.0/24E.&nbsp;&nbsp;&nbsp; 172.16.0.0/12F.&nbsp;&nbsp;&nbsp; 198.50.100.0/24 Answer: BCE QUESTION 137Refer to the exhibit . Which Statement about this configuration is true? A.&nbsp;&nbsp;&nbsp; The ASA stops LSA type 7 packets from flooding into OSPF area 1.B.&nbsp;&nbsp;&nbsp; The ASA injects a static default route into OSPF area 1.C.&nbsp;&nbsp;&nbsp; The ASA redistributes routes from one OSPF process to another.D.&nbsp;&nbsp;&nbsp; The ASA redistributes routes from one routing protocol to another.E.&nbsp;&nbsp;&nbsp; The ASA injects a static default route into OSPF process 1. Answer: C QUESTION 138Drag and Drop QuestionDrag and drop step in the flow of packets on a DMVPN network using GDOI on the left into the correct sequence on the right. Answer: QUESTION 139When attempting to use basic Http authentication to authenticate a client,which type of HTTP massage should the server use? A.&nbsp;&nbsp;&nbsp; HTTP 200 with a WWW-authenticate header.B.&nbsp;&nbsp;&nbsp; HTTP 401 with a WWW-authenticate header.C.&nbsp;&nbsp;&nbsp; Http 302 with an authenticate header.D.&nbsp;&nbsp;&nbsp; HTTP 407. Answer: B QUESTION 140Drag and Drop QuestionDrag and Drop each Cisco Intrusion Prevention System anomaly detection event action on the left onto the matching description on the right. Answer: QUESTION 141Which two statements about the ISO are true? (Choose two.) A.&nbsp;&nbsp;&nbsp; The ISO is a government-based organization.B.&nbsp;&nbsp;&nbsp; The ISO has three membership categories: member, correspondent, and subscribers.C.&nbsp;&nbsp;&nbsp; Only member bodies have voting rights.D.&nbsp;&nbsp;&nbsp; Correspondent bodies are small countries with their own standards organization.E.&nbsp;&nbsp;&nbsp; Subscriber members are individual organizations. Answer: BC QUESTION 142What feature on Cisco IOS router enables user identification and authorization based on per-user policies? A.&nbsp;&nbsp;&nbsp; CBACB.&nbsp;&nbsp;&nbsp; IPsecC.&nbsp;&nbsp;&nbsp; Authentication proxyD.&nbsp;&nbsp;&nbsp; NetFlow v9E.&nbsp;&nbsp;&nbsp; Zone-based firewallF.&nbsp;&nbsp;&nbsp; EEM Answer: C QUESTION 143Which two statements about WPA 2 with AES CCMP encryption are true? (Choose two.) A.&nbsp;&nbsp;&nbsp; AES CCMP is a block cipherB.&nbsp;&nbsp;&nbsp; It is compatible with TACACS+ servers running LEAP authenticationC.&nbsp;&nbsp;&nbsp; Every wireless packet sent to the host is tagged with CCMP framesD.&nbsp;&nbsp;&nbsp; It uses a 256-bit hashing keyE.&nbsp;&nbsp;&nbsp; The MIC prevents modifications of wireless frames and replay attacksF.&nbsp;&nbsp;&nbsp; It uses a 128-bit hashing key Answer: AF QUESTION 144Refer to the exhibit. You have received an advisory that your organization could be running a vulnerable product. Using the Cisco Systems Rapid Risk Vulnerability Model, you determine that:* Your organization is running an affected product on a vulnerable version of code vulnerable component is enabled and there is no feasible workaround.* There is medium confidence of an attack without significant collateral damage to the organization.According to the model, what is the appropriate urgency for remediation? A.&nbsp;&nbsp;&nbsp; priority maintenance processB.&nbsp;&nbsp;&nbsp; contact ISP to trace attackC.&nbsp;&nbsp;&nbsp; no action requiredD.&nbsp;&nbsp;&nbsp; remove vulnerable device from serviceE.&nbsp;&nbsp;&nbsp; standard maintenance processF.&nbsp;&nbsp;&nbsp; immediate mitigation process Answer: E QUESTION 145When configuration Cisco IOS firewall CBAC operation on Cisco routers, the "inspection rule" can be applied at which two location? (Choose two.) A.&nbsp;&nbsp;&nbsp; at the trusted and untrusted interfaces in the inbound direction.B.&nbsp;&nbsp;&nbsp; at the trusted interface in the inbound direction.C.&nbsp;&nbsp;&nbsp; at the trusted and untrusted interfaces in the outbound direction.D.&nbsp;&nbsp;&nbsp; at the untrusted interface in the inbound direction.E.&nbsp;&nbsp;&nbsp; at the trusted interface in the outbound direction.F.&nbsp;&nbsp;&nbsp; at the trusted interface in the outbound direction. Answer: BF QUESTION 146Refer to the exhibit, what type of attack is illustrated? A.&nbsp;&nbsp;&nbsp; ICMP floodB.&nbsp;&nbsp;&nbsp; ARP spoofingC.&nbsp;&nbsp;&nbsp; IP address spoofingD.&nbsp;&nbsp;&nbsp; CAM overflow Answer: B QUESTION 147Which protocol does VNC use for remote access to a GUI? A.&nbsp;&nbsp;&nbsp; RTPSB.&nbsp;&nbsp;&nbsp; RARPC.&nbsp;&nbsp;&nbsp; E6D.&nbsp;&nbsp;&nbsp; SSHE.&nbsp;&nbsp;&nbsp; RFB Answer: D QUESTION 148Drag and Drop QuestionDrag each management frame protection feature on the left to the function it performs on the right. Answer: QUESTION 149Which two statements about VPLS and VPWS are true? (Choose two.) A.&nbsp;&nbsp;&nbsp; VPLS Layer 2 VPNs support both full-mesh and hub-and-spoke implementationsB.&nbsp;&nbsp;&nbsp; VPWS only sends the data payload over an MPLS coreC.&nbsp;&nbsp;&nbsp; VPLS is intended for applications that require point-to-point accessD.&nbsp;&nbsp;&nbsp; VPWS supports multicast using a hub-and-spoke architectureE.&nbsp;&nbsp;&nbsp; VPLS is intended for applications that require multipoint or broadcast accessF.&nbsp;&nbsp;&nbsp; VPWS supports point-to-point integration of Layer 2 and Layer 3 services over an MPLS cloud Answer: EF QUESTION 150Refer to the exhibit, which conclusion can be drawn from this output? A.&nbsp;&nbsp;&nbsp; The license of the device supports multiple virtual firewallsB.&nbsp;&nbsp;&nbsp; The license of the device allows the establishment of the maximum number of client- based, full- tunnel SSL VPNS for the platformC.&nbsp;&nbsp;&nbsp; The license of the device allows for it to be used in a failover setD.&nbsp;&nbsp;&nbsp; The license of the device allows a full-tunnel IPsec VPN using the Rijndael cipher Answer: A    Download the newest PassLeader 400-251 dumps from passleader.com now! 100% Pass Guarantee! 400-251 PDF dumps &amp; 400-251 VCE dumps: http://www.passleader.com/400-251.html (366 Q&amp;As) (New Questions Are 100% Available and Wrong Answers Have Been Corrected! Free VCE simulator!) p.s. Free 400-251 dumps download from Google Drive: https://drive.google.com/open?id=0B-ob6L_QjGLpd3JLalNVS0VWbms

---------------------------------------------------


Images: 

---------------------------------------------------




---------------------------------------------------


Post date: 2017-02-13 14:16:56

Post date GMT: 2017-02-13 14:16:56

Post modified date: 2017-02-13 14:16:56

Post modified date GMT: 2017-02-13 14:16:56



____________________________________________________________________________________________


Export of Post and Page as text file has been powered by [ Universal Post Manager ] plugin from www.gconverters.com