This page was exported from All The Latest MCTS Exam Questions And Answers For Free Share [ https://www.mctsdump.com ]

Export date:Thu Nov 21 12:06:28 2024 / +0000 GMT

___________________________________________________


Title: [Free-Dumps] New Update PassLeader 400-251 Exam VCE And PDF Dumps (Question 1 &ndash; Question 30)

---------------------------------------------------


New Updated 400-251 Exam Questions from PassLeader 400-251 PDF dumps! Welcome to download the newest PassLeader 400-251 VCE dumps: http://www.passleader.com/400-251.html (366 Q&amp;As) Keywords: 400-251 exam dumps, 400-251 exam questions, 400-251 VCE dumps, 400-251 PDF dumps, 400-251 practice tests, 400-251 study guide, 400-251 braindumps, CCIE Security Exam p.s. Free 400-251 dumps download from Google Drive: https://drive.google.com/open?id=0B-ob6L_QjGLpd3JLalNVS0VWbms QUESTION 1According to OWASP guidelines, what is the recommended method to prevent cross-site request forgery? A.&nbsp;&nbsp;&nbsp; Allow only POST requests.B.&nbsp;&nbsp;&nbsp; Mark all cookies as HTTP only.C.&nbsp;&nbsp;&nbsp; Use per-session challenge tokens in links within your web application.D.&nbsp;&nbsp;&nbsp; Always use the "secure" attribute for cookies.E.&nbsp;&nbsp;&nbsp; Require strong passwords.  Answer: C QUESTION 2What is the maximum pattern length supported by FPM searches within a packet? A.&nbsp;&nbsp;&nbsp; 256 bytesB.&nbsp;&nbsp;&nbsp; 128 bytesC.&nbsp;&nbsp;&nbsp; 512 bytesD.&nbsp;&nbsp;&nbsp; 1500 bytes Answer: A QUESTION 3Which two statements about role-based access control are true? (Choose two.) A.&nbsp;&nbsp;&nbsp; Server profile administrators have read and write access to all system logs by default.B.&nbsp;&nbsp;&nbsp; If the same user name is used for a local user account and a remote user account, the roles defined in the remote user account override the local user account.C.&nbsp;&nbsp;&nbsp; A view is created on the Cisco IOS device to leverage role-based access controls.D.&nbsp;&nbsp;&nbsp; Network administrators have read and write access to all system logs by default.E.&nbsp;&nbsp;&nbsp; The user profile on an AAA server is configured with the roles that grant user privileges. Answer: DE QUESTION 4Which three global correlation feature can be enabled from cisco IPD device manager (Cisco IDM)? (Choose three.) A.&nbsp;&nbsp;&nbsp; Network ReputationB.&nbsp;&nbsp;&nbsp; Global Data InteractionC.&nbsp;&nbsp;&nbsp; Signature CorrelationD.&nbsp;&nbsp;&nbsp; Reputation FilteringE.&nbsp;&nbsp;&nbsp; Global Correlation InspectionF.&nbsp;&nbsp;&nbsp; Data ContributionG.&nbsp;&nbsp;&nbsp; Reputation Assignment Answer: CDE QUESTION 5According to RFC 4890, which three message must be dropped at the transit firewall/router? (Choose three.) A.&nbsp;&nbsp;&nbsp; Router Renumbering (Type 138)B.&nbsp;&nbsp;&nbsp; Node Information Query (Type 139)C.&nbsp;&nbsp;&nbsp; Router Solicitation (Type 133)D.&nbsp;&nbsp;&nbsp; Node information Response (Type 140)E.&nbsp;&nbsp;&nbsp; Router Advertisement (Type 134)F.&nbsp;&nbsp;&nbsp; Neighbor Solicitaion (Type 135) Answer: ABD QUESTION 6What is the effect of the following command on Cisco IOS router?ip dns spoofing 1.1.1.1 A.&nbsp;&nbsp;&nbsp; The router will respond to the DNS query with its highest loopback address configuredB.&nbsp;&nbsp;&nbsp; The router will respond to the DNS query with 1.1.1.1 if the query id for its own hostnameC.&nbsp;&nbsp;&nbsp; The router will respond to the DNS query with the IP address of its incoming interface for any hostname queryD.&nbsp;&nbsp;&nbsp; The router will respond to the DNS query with the IP address of its incoming interface for its own hostname Answer: D QUESTION 7Which two options are differences between automation and orchestration? (Choose two.) A.&nbsp;&nbsp;&nbsp; Automation is to be used to replace human interventionB.&nbsp;&nbsp;&nbsp; Automation is focused on automating a single or multiple tasksC.&nbsp;&nbsp;&nbsp; Orchestration is focused on an end-to-end process or workflowD.&nbsp;&nbsp;&nbsp; Orchestration is focused on multiple technologies to be integrated togetherE.&nbsp;&nbsp;&nbsp; Automation is an IT workflow composed of tasks, and Orchestration is a technical task Answer: BC QUESTION 8Refer to the exhibit. What is the effect of the given configuration? A.&nbsp;&nbsp;&nbsp; It sets the duplicate address detection interval to 60 second and sets the IPv6 neighbor reachable time to 3600 milliseconds.B.&nbsp;&nbsp;&nbsp; It sets the number of neighbor solicitation massages to 60 and sets the retransmission interval to 3600 milliseconds.C.&nbsp;&nbsp;&nbsp; It sets the number of duplicate address detection attempts to 60 and sets the duplicate address detection interval to 3600 millisecond.D.&nbsp;&nbsp;&nbsp; It sets the number of neighbor solicitation massage to 60 and set the duplicate address detection interval to 3600 second.E.&nbsp;&nbsp;&nbsp; It sets the duplicate address detection interval to 60 second and set the IPv6 neighbor solicitation interval to 3600 millisecond. Answer: E QUESTION 9What are two characteristics of RPL, used in loT environments? (Choose two.) A.&nbsp;&nbsp;&nbsp; It is an Exterior Gateway ProtocolB.&nbsp;&nbsp;&nbsp; It is a Interior Gateway ProtocolC.&nbsp;&nbsp;&nbsp; It is a hybrid protocolD.&nbsp;&nbsp;&nbsp; It is link-state protocolE.&nbsp;&nbsp;&nbsp; It is a distance-vector protocol Answer: BE QUESTION 10In a Cisco ASA multiple-context mode of operation configuration, what three session types are resource-limited by default when their context is a member of the default class? (Choose three.) A.&nbsp;&nbsp;&nbsp; Telnet sessionsB.&nbsp;&nbsp;&nbsp; ASDM sessionsC.&nbsp;&nbsp;&nbsp; IPSec sessionsD.&nbsp;&nbsp;&nbsp; SSH sessionsE.&nbsp;&nbsp;&nbsp; TCP sessionsF.&nbsp;&nbsp;&nbsp; SSL VPN sessions Answer: ABD QUESTION 11Drag and Drop QuestionDrag each OSPF security feature on the left to its description on the right. Answer: QUESTION 12Which VPN technology is based on GDOI (RFC 3547)? A.&nbsp;&nbsp;&nbsp; MPLS Layer 3 VPNB.&nbsp;&nbsp;&nbsp; MPLS Layer 2 VPNC.&nbsp;&nbsp;&nbsp; GET VPND.&nbsp;&nbsp;&nbsp; IPsec VPN Answer: C QUESTION 13Which statement about the 3DES algorithm is true? A.&nbsp;&nbsp;&nbsp; The 3DES algorithm uses the same key for encryption and decryption.B.&nbsp;&nbsp;&nbsp; The 3DES algorithm uses a public-private key pair with a public key for encryption and a private key for decryption.C.&nbsp;&nbsp;&nbsp; The 3DES algorithm is a block cipher.D.&nbsp;&nbsp;&nbsp; The 3DES algorithm uses a key length of 112 bits.E.&nbsp;&nbsp;&nbsp; The 3DES algorithm is faster than DES due to the shorter key length. Answer: C QUESTION 14Which significant change to PCI DSS standards was made in PCI DSS version 3.1? A.&nbsp;&nbsp;&nbsp; No version of TLS is now considered to provide strong cryptography.B.&nbsp;&nbsp;&nbsp; Storage of sensitive authentication data after authorization is now permitted when proper encryption is applied.C.&nbsp;&nbsp;&nbsp; Passwords are now required to be changed at least once every 30 days.D.&nbsp;&nbsp;&nbsp; SSL is now considered a weak cryptographic technology.E.&nbsp;&nbsp;&nbsp; If systems that are vulnerable to POODLE are deployed in an organization, a patching and audit review process must be implemented. Answer: D QUESTION 15Refer to the Exhibit, what is a possible reason for the given error? A.&nbsp;&nbsp;&nbsp; One or more require application failed to respond.B.&nbsp;&nbsp;&nbsp; The IPS engine is busy building cache files.C.&nbsp;&nbsp;&nbsp; The IPS engine I waiting for a CLI session to terminate.D.&nbsp;&nbsp;&nbsp; The virtual sensor is still initializing. Answer: D QUESTION 16Which three statements about the keying methods used by MAC Sec are true? (Choose three.) A.&nbsp;&nbsp;&nbsp; MKA is implemented as an EAPoL packet exchange.B.&nbsp;&nbsp;&nbsp; SAP is enabled by default for Cisco TrustSec in manual configuration mode.C.&nbsp;&nbsp;&nbsp; SAP is supported on SPAN destination ports.D.&nbsp;&nbsp;&nbsp; Key management for host-to-switch and switch-to-switch MACSec sessions is provided by MKA.E.&nbsp;&nbsp;&nbsp; SAP is not supported on switch SVIs.F.&nbsp;&nbsp;&nbsp; A valid mode for SAP is NULL. Answer: ABF QUESTION 17Which two statements about Cisco ASA authentication using LDAP are true? (Choose two.) A.&nbsp;&nbsp;&nbsp; It uses attribute maps to map the AD memberOf attribute to the cisco ASA Group-Poilcy attributeB.&nbsp;&nbsp;&nbsp; It uses AD attribute maps to assign users to group policies configured under the WebVPN contextC.&nbsp;&nbsp;&nbsp; The Cisco ASA can use more than one AD memberOf attribute to match a user to multiple group policiesD.&nbsp;&nbsp;&nbsp; It can assign a group policy to a user based on access credentialsE.&nbsp;&nbsp;&nbsp; It can combine AD attributes and LDP attributes to configure group policies on the Cisco ASAF.&nbsp;&nbsp;&nbsp; It is a closed standard that manages directory-information services over distributed networks Answer: AB QUESTION 18Drag and Drop QuestionDrag each IPS signature engine on the left to its description on the right. Answer: QUESTION 19With this configuration you notice that the IKE and IPsec SAs come up between the spoke and the hub, but NHRP registration fails Registration will continue to fail until you do which of these? A.&nbsp;&nbsp;&nbsp; Modify the NHRP network IDs to match on the hub and spoke.B.&nbsp;&nbsp;&nbsp; configure the ip nhrp caches non-authoritative command on the hub's tunnel interface.C.&nbsp;&nbsp;&nbsp; modify the tunnel keys to match on the hub and spoke.D.&nbsp;&nbsp;&nbsp; modify the NHRP hold time to match on the hub and spoke. Answer: C QUESTION 20Which three statements are true regarding Security Group Tags? (Choose three.) A.&nbsp;&nbsp;&nbsp; When using the Cisco ISE solution, the Security Group Tag gets defined as a separate authorization result.B.&nbsp;&nbsp;&nbsp; When using the Cisco ISE solution, the Security Group Tag gets defined as part of a standard authorization profile.C.&nbsp;&nbsp;&nbsp; Security Group Tags are a supported network authorization result using Cisco ACS 5.x.D.&nbsp;&nbsp;&nbsp; Security Group Tags are a supported network authorization result for 802.1X, MAC Authentication Bypass, and WebAuth methods of authentication.E.&nbsp;&nbsp;&nbsp; A Security Group Tag is a variable length string that is returned as an authorization result. Answer: ACD QUESTION 21Refer to the exhibit which two statement about the given IPV6 ZBF configuration are true? (Choose two.) A.&nbsp;&nbsp;&nbsp; It provides backward compability with legacy IPv6 inspection.B.&nbsp;&nbsp;&nbsp; It inspect TCP, UDP,ICMP and FTP traffic from Z1 to Z2.C.&nbsp;&nbsp;&nbsp; It inspect TCP, UDP,ICMP and FTP traffic from Z2 to Z1.D.&nbsp;&nbsp;&nbsp; It inspect TCP,UDP,ICMP and FTP traffic in both direction between z1 and z2.E.&nbsp;&nbsp;&nbsp; It passes TCP, UDP,ICMP and FTP traffic from z1 to z2.F.&nbsp;&nbsp;&nbsp; It provide backward compatibility with legacy IPv4 inseption. Answer: AB QUESTION 22In which class of applications security threads does HTTP header manipulation reside? A.&nbsp;&nbsp;&nbsp; Session managementB.&nbsp;&nbsp;&nbsp; Parameter manipulationC.&nbsp;&nbsp;&nbsp; Software tamperingD.&nbsp;&nbsp;&nbsp; Exception managements Answer: A QUESTION 23What is the most commonly used technology to establish an encrypted HTTP connection? A.&nbsp;&nbsp;&nbsp; the HTTP/1.1 Upgrade headerB.&nbsp;&nbsp;&nbsp; the HTTP/1.0 Upgrade headerC.&nbsp;&nbsp;&nbsp; Secure Hypertext Transfer ProtocolD.&nbsp;&nbsp;&nbsp; HTTPS Answer: D QUESTION 24What functionality is provided by DNSSEC? A.&nbsp;&nbsp;&nbsp; origin authentication of DNS dataB.&nbsp;&nbsp;&nbsp; data confidentiality of DNS queries and answersC.&nbsp;&nbsp;&nbsp; access restriction of DNS zone transfersD.&nbsp;&nbsp;&nbsp; storage of the certificate records in a DNS zone file Answer: A QUESTION 25What are the two mechanism that are used to authenticate OSPFv3 packets?(Choose two.) A.&nbsp;&nbsp;&nbsp; MD5B.&nbsp;&nbsp;&nbsp; ESPC.&nbsp;&nbsp;&nbsp; PLAIN TEXTD.&nbsp;&nbsp;&nbsp; AHE.&nbsp;&nbsp;&nbsp; SHA Answer: BD QUESTION 26You have been asked to configure a Cisco ASA appliance in multiple mode with these settings:(A) You need two customer contexts, named contextA and contextB(B) Allocate interfaces G0/0 and G0/1 to contextA(C) Allocate interfaces G0/0 and G0/2 to contextB(D) The physical interface name for G0/1 within contextA should be "inside"(E) All other context interfaces must be viewable via their physical interface namesIf the admin context is already defined and all interfaces are enabled, which command set will complete this configuration? A.&nbsp;&nbsp;&nbsp; context contextAconfig-url disk0:/contextA.cfgallocate-interface GigabitEthernet0/0 visibleallocate-interface GigabitEthernet0/1 insidecontext contextBconfig-url disk0:/contextB.cfgallocate-interface GigabitEthernet0/0 visibleallocate-interface GigabitEthernet0/2 visibleB.&nbsp;&nbsp;&nbsp; context contextaconfig-url disk0:/contextA.cfgallocate-interface GigabitEthernet0/0 visibleallocate-interface GigabitEthernet0/1 insidecontext contextbconfig-url disk0:/contextB.cfgallocate-interface GigabitEthernet0/0 visibleallocate-interface GigabitEthernet0/2 visibleC.&nbsp;&nbsp;&nbsp; context contextAconfig-url disk0:/contextA.cfgallocate-interface GigabitEthernet0/0 invisibleallocate-interface GigabitEthernet0/1 insidecontext contextBconfig-url disk0:/contextB.cfgallocate-interface GigabitEthernet0/0 invisibleallocate-interface GigabitEthernet0/2 invisibleD.&nbsp;&nbsp;&nbsp; context contextAconfig-url disk0:/contextA.cfgallocate-interface GigabitEthernet0/0allocate-interface GigabitEthernet0/1 insidecontext contextBconfig-url disk0:/contextB.cfgallocate-interface GigabitEthernet0/0allocate-interface GigabitEthernet0/2E.&nbsp;&nbsp;&nbsp; context contextAconfig-url disk0:/contextA.cfgallocate-interface GigabitEthernet0/0 visibleallocate-interface GigabitEthernet0/1 insidecontext contextBconfig-url disk0:/contextB.cfgallocate-interface GigabitEthernet0/1 visibleallocate-interface GigabitEthernet0/2 visible Answer: A QUESTION 27Which statement about the cisco anyconnect web security module is true? A.&nbsp;&nbsp;&nbsp; It is VPN client software that works over the SSl protocol.B.&nbsp;&nbsp;&nbsp; It is an endpoint component that is used with smart tunnel in a clientless SSL VPN.C.&nbsp;&nbsp;&nbsp; It operates as an NAC agent when it is configured with the Anyconnect VPN client.D.&nbsp;&nbsp;&nbsp; It is deployed on endpoints to route HTTP traffic to SCANsafe. Answer: D QUESTION 28Which two statements about the SeND protocol are true? (Choose two.) A.&nbsp;&nbsp;&nbsp; It uses IPsec as a baseline mechanismB.&nbsp;&nbsp;&nbsp; It supports an autoconfiguration mechanismC.&nbsp;&nbsp;&nbsp; It must be enabled before you can configure IPv6 addressesD.&nbsp;&nbsp;&nbsp; It supports numerous custom neighbor discovery messagesE.&nbsp;&nbsp;&nbsp; It counters neighbor discovery threatsF.&nbsp;&nbsp;&nbsp; It logs IPv6-related threats to an external log server Answer: BE QUESTION 29Drag and Drop QuestionDrag each attack type on the left to the matching attack category on the right. Answer: QUESTION 30Refer to the exhibit. You executed the show crypto key mypubkey rsa command to verify that the RSA key is protected and it generated the given output. What command must you have entered to protect the key? A.&nbsp;&nbsp;&nbsp; crypto key decrypt rsa name pki.cisco.com passphrase CiscoPKIB.&nbsp;&nbsp;&nbsp; crypto key zeroize rsa CiscoPKIC.&nbsp;&nbsp;&nbsp; crypto key export ras pki.cisco.com pem url flash: 3des CiscoPKID.&nbsp;&nbsp;&nbsp; crypto key lock rsa name pki.cisco.com passphrase CiscoPKIE.&nbsp;&nbsp;&nbsp; crypto key import rsa pki.cisco.com pem url nvram: CiscoPKI Answer: D    Download the newest PassLeader 400-251 dumps from passleader.com now! 100% Pass Guarantee! 400-251 PDF dumps &amp; 400-251 VCE dumps: http://www.passleader.com/400-251.html (366 Q&amp;As) (New Questions Are 100% Available and Wrong Answers Have Been Corrected! Free VCE simulator!) p.s. Free 400-251 dumps download from Google Drive: https://drive.google.com/open?id=0B-ob6L_QjGLpd3JLalNVS0VWbms

---------------------------------------------------


Images: 

---------------------------------------------------




---------------------------------------------------


Post date: 2017-02-13 08:09:19

Post date GMT: 2017-02-13 08:09:19

Post modified date: 2017-02-13 08:09:19

Post modified date GMT: 2017-02-13 08:09:19



____________________________________________________________________________________________


Export of Post and Page as text file has been powered by [ Universal Post Manager ] plugin from www.gconverters.com