This page was exported from All The Latest MCTS Exam Questions And Answers For Free Share [ https://www.mctsdump.com ]

Export date:Thu Nov 21 11:16:37 2024 / +0000 GMT

___________________________________________________


Title: [Free-Dumps] PassLeader VCE and PDF Dumps Free Download For 400-251 Exam (Question 211 &ndash; Question 240)

---------------------------------------------------


New Updated 400-251 Exam Questions from PassLeader 400-251 PDF dumps! Welcome to download the newest PassLeader 400-251 VCE dumps: http://www.passleader.com/400-251.html (366 Q&amp;As) Keywords: 400-251 exam dumps, 400-251 exam questions, 400-251 VCE dumps, 400-251 PDF dumps, 400-251 practice tests, 400-251 study guide, 400-251 braindumps, CCIE Security Exam p.s. Free 400-251 dumps download from Google Drive: https://drive.google.com/open?id=0B-ob6L_QjGLpd3JLalNVS0VWbms QUESTION 211Refer to the exhibit. Which statement about the router R1 is true? A.&nbsp;&nbsp;&nbsp; Its private-config is corrupt.B.&nbsp;&nbsp;&nbsp; Its NVRAM contains public and private crypto keys.C.&nbsp;&nbsp;&nbsp; Its running configuration is missing.D.&nbsp;&nbsp;&nbsp; RMON is configured.  Answer: B QUESTION 212Refer to the Exhibit. What is the effect of the given ACL policy? A.&nbsp;&nbsp;&nbsp; The policy will deny all IPv6 eBGP session.B.&nbsp;&nbsp;&nbsp; The policy will disable IPv6 source routing.C.&nbsp;&nbsp;&nbsp; The policy will deny all IPv6 routing packet.D.&nbsp;&nbsp;&nbsp; The policy will deny all IPv6 routed packet. Answer: B QUESTION 213Which three statements about the RSA algorithm are true? (Choose three.) A.&nbsp;&nbsp;&nbsp; The RSA algorithm provides encryption but not authentication.B.&nbsp;&nbsp;&nbsp; The RSA algorithm provides authentication but not encryption.C.&nbsp;&nbsp;&nbsp; The RSA algorithm creates a pair of public-private keys that are shared by entities that perform encryption.D.&nbsp;&nbsp;&nbsp; The private key is never sent across after it is generated.E.&nbsp;&nbsp;&nbsp; The public key is used to decrypt the message that was encrypted by the private key.F.&nbsp;&nbsp;&nbsp; The private key is used to decrypt the message that was encrypted by the public key. Answer: CDF QUESTION 214Which of these is a core function of the risk assessment process? (Choose one.) A.&nbsp;&nbsp;&nbsp; performing regular network upgradesB.&nbsp;&nbsp;&nbsp; performing network optimizationC.&nbsp;&nbsp;&nbsp; performing network posture validationD.&nbsp;&nbsp;&nbsp; establishing network baselinesE.&nbsp;&nbsp;&nbsp; prioritizing network roll-outs Answer: C QUESTION 215Which two router configurations block packets with the Type 0 Routing header on the interface? (Choose two.) A.&nbsp;&nbsp;&nbsp; Ipv6 access-list Deny_Loose_Routingpermit ipv6 any any routing-type 0deny ipv6 any anyinterface FastEthernet0/0ipv6 traffic-filter Deny_Loose_Source_Routing inB.&nbsp;&nbsp;&nbsp; Ipv6 access-list-Deny_Loose_Source_RoutingDeny ipv6 FE80::/10 any mobility -type bind-refreshInterface FastEthernet/0Ipv6 trAffic-filter Deny_Loose_Source_Routing inC.&nbsp;&nbsp;&nbsp; Ipv6 access-list Deny_Loose_Source_RoutingDeny ipv6 any any routing-type 0Permit ipv6 any anyInterface FastEthernet0/0Ipv6 traffic -filter Deny_Loose_Routing inD.&nbsp;&nbsp;&nbsp; Ipv6 access -list Deny_Loose_Source_RoutingDeny ipv6 any FE80: :/10 routing -type 0Deny ipv6 any any routing -type 0Permit ipv6 any anyInterface FastEthernet t0/0Ipv6 traffic -filter Deny_Loose_Source_Routing inE.&nbsp;&nbsp;&nbsp; Ipv6 access -list Deny_Loose_Source_RoutingSequence 1 deny ipv6 any any routing -type 0 log-inputSequence 2 permit ipv6 any any flow -label 0 routing interface Fastethernet0/0Ipv6 traffic-filter Deny_Loose_Source_Routing in Answer: CD QUESTION 216What protocol provides security for datagram protocols? A.&nbsp;&nbsp;&nbsp; MABB.&nbsp;&nbsp;&nbsp; DTLSC.&nbsp;&nbsp;&nbsp; SCEPD.&nbsp;&nbsp;&nbsp; GETE.&nbsp;&nbsp;&nbsp; LDP Answer: B QUESTION 217Which two options are open-source SDN controllers? (Choose two.) A.&nbsp;&nbsp;&nbsp; OpenContrailB.&nbsp;&nbsp;&nbsp; OpenDaylightC.&nbsp;&nbsp;&nbsp; Big Cloud FabricD.&nbsp;&nbsp;&nbsp; Virtual Application Networks SDN ControllerE.&nbsp;&nbsp;&nbsp; Application Policy Infrastructure Controller Answer: AB QUESTION 218Which current RFC made RFCs 2409, 2407, and 2408 obsolete? A.&nbsp;&nbsp;&nbsp; RFC 4306B.&nbsp;&nbsp;&nbsp; RFC 2401C.&nbsp;&nbsp;&nbsp; RFC 5996D.&nbsp;&nbsp;&nbsp; RFC 4301E.&nbsp;&nbsp;&nbsp; RFC 1825 Answer: A QUESTION 219Refer to the exhibit. Which effect of this configuration is true? A.&nbsp;&nbsp;&nbsp; It enables MLD query messages for all link-local groups.B.&nbsp;&nbsp;&nbsp; It configures the node to generate a link-local group report when it joins the solicited- node multicast group.C.&nbsp;&nbsp;&nbsp; It enables hosts to send MLD report messages for groups 224.0.0.0/24.D.&nbsp;&nbsp;&nbsp; it enables local group membership for MLDv1 and MLDv2.E.&nbsp;&nbsp;&nbsp; It enables the host to send MLD report messages for nonlink local groups. Answer: C QUESTION 220Which technology builds on the vPathconcept and can be used in virtual and physical environments? A.&nbsp;&nbsp;&nbsp; VXLANB.&nbsp;&nbsp;&nbsp; ACIC.&nbsp;&nbsp;&nbsp; NSHD.&nbsp;&nbsp;&nbsp; SDN Answer: C QUESTION 221Which two statements about header attacks are true? (Choose two.) A.&nbsp;&nbsp;&nbsp; An attacker can use IPv6 Next Header attacks to steal user data and launch phishing attacks.B.&nbsp;&nbsp;&nbsp; An attacker can use HTTP Header attacks to launch a DoS attack.C.&nbsp;&nbsp;&nbsp; An attacker can execute a spoofing attack by populating the RH0 routing header subtype with multiple destination addresses.D.&nbsp;&nbsp;&nbsp; An attacker can leverage an HTTP response header to write malicious cookies.E.&nbsp;&nbsp;&nbsp; An attacker can leverage an HTTP response header to inject malicious code into an application layer.F.&nbsp;&nbsp;&nbsp; An attacker can use vulnerabilities in the IPv6 routing header to launch attacks at the application layer. Answer: BC QUESTION 222Refer to the exhibit. Routers R1, R2, and R3 have IPv6 reachability, and R1 and R3 are able to ping each other with the IPv6 global unicast address. However, R1 and R3 are unable to ping each other with their link-local addresses. What is a possible reason for the problem? A.&nbsp;&nbsp;&nbsp; Link-local addresses can communicate with neighboring interfaces.B.&nbsp;&nbsp;&nbsp; Link-local addresses are forwarded by IPv6 routers using loopback interfaces.C.&nbsp;&nbsp;&nbsp; Link-local addresses can be used only with a physical interface's local network.D.&nbsp;&nbsp;&nbsp; Multicast must be enabled to allow link-local addresses to traverse multiple hops. Answer: C QUESTION 223What is the effect of the Cisco Application Control Engine (ACE. command ipv6 fragment min-mtu 1024? A.&nbsp;&nbsp;&nbsp; It configures the interface to fragment packets on connections with MTUs of 1024 or greaterB.&nbsp;&nbsp;&nbsp; It sets the MTU to 1024 bytes for an IPv6 VLAN interface that accepts fragmented packetsC.&nbsp;&nbsp;&nbsp; It configures the interface to attempt to reassemble only IPv6 fragments that are less than 1024 bytesD.&nbsp;&nbsp;&nbsp; It configures the interface to fragment packets on connections with MTUs of 1024 or lessE.&nbsp;&nbsp;&nbsp; It configures the interface to attempt to reassemble only IPv6 fragments that are at least 1024 bytes Answer: E QUESTION 224Which Two statement about the PCoIP protocol are true? (Choose two.) A.&nbsp;&nbsp;&nbsp; It support both loss and lossless compression.B.&nbsp;&nbsp;&nbsp; It is a client-rendered, multicast-codec protocol.C.&nbsp;&nbsp;&nbsp; It is available in both software and hardware.D.&nbsp;&nbsp;&nbsp; It is a TCP-based protocol.E.&nbsp;&nbsp;&nbsp; It uses a variety of codec to support different operating system. Answer: AC QUESTION 225Drag and Drop QuestionDrag the step in the SCEP workflow on the left into the correct order of operation on the right. Answer: QUESTION 226What are the two technologies that support AFT? (Choose two.) A.&nbsp;&nbsp;&nbsp; NAT-PTB.&nbsp;&nbsp;&nbsp; SNATC.&nbsp;&nbsp;&nbsp; NAT64D.&nbsp;&nbsp;&nbsp; DNATE.&nbsp;&nbsp;&nbsp; NAT-PMPF.&nbsp;&nbsp;&nbsp; NAT-6to4 Answer: AC QUESTION 227According to RFC 2577, Which two options describe drawbacks of the FTP protocol? (Choose two.) A.&nbsp;&nbsp;&nbsp; If access to the FTP server is restricted by network address, the server still is susceptible to spoofing attacks.B.&nbsp;&nbsp;&nbsp; Servers that apply connection limits to protect against brute force attacks are vulnerable to DoS attacks.C.&nbsp;&nbsp;&nbsp; It is susceptible to man-m-the-middle attacks.D.&nbsp;&nbsp;&nbsp; An attacker can validate user names if the 331 response is in use.E.&nbsp;&nbsp;&nbsp; It is susceptible to bounce attacks on port 1024. Answer: DE QUESTION 228Refer to the exhibit. Which two effects of this configuration are true? (Choose two.) A.&nbsp;&nbsp;&nbsp; The BGP neighbor session tears down after R1 receives 100 prefixes from the neighbor 1.1.1.1B.&nbsp;&nbsp;&nbsp; The BGP neighbor session between R1 and R2 re-establishes after 50 minutesC.&nbsp;&nbsp;&nbsp; A warning message is displayed on R2 after it receives 50 prefixesD.&nbsp;&nbsp;&nbsp; A warning message is displayed on R2 after it receives 100 prefixes from neighbor 1.1.1.1E.&nbsp;&nbsp;&nbsp; The BGP neighbor session tears down after R1 receives 200 prefixes from neighbor 2.2.2.2F.&nbsp;&nbsp;&nbsp; The BGP neighbor session between R1 and R2 re-establishes after 100 minutes Answer: DE QUESTION 229Drag and Drop QuestionDrag and drop the DNS record types from the left to the matching descriptions to the right. Answer: QUESTION 230Which two statements describe the Cisco TrustSec system correctly? (Choose two.) A.&nbsp;&nbsp;&nbsp; The Cisco TrustSec system is a partner program, where Cisco certifies third-party security products as extensions to the secure infrastructure.B.&nbsp;&nbsp;&nbsp; The Cisco TrustSec system is an approach to certifying multimedia and collaboration applications as secure.C.&nbsp;&nbsp;&nbsp; The Cisco TrustSec system is an Advanced Network Access Control System that leverages enforcement intelligence in the network infrastructure.D.&nbsp;&nbsp;&nbsp; The Cisco TrustSec system tests and certifies all products and product versions that make up the system as working together in a validated manner. Answer: CD QUESTION 231Which two statement about DTLS are true ? (Choose two.) A.&nbsp;&nbsp;&nbsp; Unlike TLS,DTLS support VPN connection with ASA.B.&nbsp;&nbsp;&nbsp; It is more secure that TLS.C.&nbsp;&nbsp;&nbsp; When DPD is enabled DTLS connection can automatically fall back to TLS.D.&nbsp;&nbsp;&nbsp; It overcomes the latency and bandwidth problem that can with SSL.E.&nbsp;&nbsp;&nbsp; IT come reduce packet delays and improve application performance.F.&nbsp;&nbsp;&nbsp; It support SSL VPNs without requiring an SSL tunnel. Answer: CD QUESTION 232NWhich two statements about the ISO are true? (Choose two.) A.&nbsp;&nbsp;&nbsp; The ISO is a government-based organization.B.&nbsp;&nbsp;&nbsp; The ISO has three membership categories: Member, Correspondent, and Subscribers.C.&nbsp;&nbsp;&nbsp; Subscriber members are individual organizations.D.&nbsp;&nbsp;&nbsp; Only member bodies have voting rights.E.&nbsp;&nbsp;&nbsp; Correspondent bodies are small countries with their own standards organization. Answer: BDExplanation:Member bodies are national bodies considered the most representative standards body in each country. These are the only members of ISO that have voting rights. QUESTION 233Drag and Drop QuestionDrag each SSI encryption algorithm on the left to the encryption and hashing values it uses on the right. Answer: QUESTION 234Drag and Drop QuestionDrag and drop the role on the left onto their responsibility in the change-management process on the right. Answer: QUESTION 235Refer to the exhibit, which as-path access-list regular expression should be applied on R2 as a neighbor filter list to only allow update with and origin of AS 65503? A.&nbsp;&nbsp;&nbsp; _65509.?$B.&nbsp;&nbsp;&nbsp; _65503$C.&nbsp;&nbsp;&nbsp; ^65503.*D.&nbsp;&nbsp;&nbsp; ^65503$E.&nbsp;&nbsp;&nbsp; _65503_F.&nbsp;&nbsp;&nbsp; 65503 Answer: C QUESTION 236Which two commands would enable secure logging on Cisco ASA to a syslog server at 10.0.0.1? (Choose two.) A.&nbsp;&nbsp;&nbsp; logging host inside 10.0.0.1 TCP/1500 secureB.&nbsp;&nbsp;&nbsp; logging host inside 10.0.0.1 UDP/514 secureC.&nbsp;&nbsp;&nbsp; logging host inside 10.0.0.1 TCP/1470 secureD.&nbsp;&nbsp;&nbsp; logging host inside 10.0.0.1 UDP/500 secureE.&nbsp;&nbsp;&nbsp; logging host inside 10.0.0.1 UDP/447 secure Answer: AC QUESTION 237What feature enables extended secure access from non-secure physical location? A.&nbsp;&nbsp;&nbsp; Port securityB.&nbsp;&nbsp;&nbsp; Strom controlC.&nbsp;&nbsp;&nbsp; NEATD.&nbsp;&nbsp;&nbsp; CBACE.&nbsp;&nbsp;&nbsp; 802 1x pot-based authentication Answer: C QUESTION 238Which of the following best describes Chain of Evidence in the context of security forensics? A.&nbsp;&nbsp;&nbsp; Evidence is locked down, but not necessarily authenticated.B.&nbsp;&nbsp;&nbsp; Evidence is controlled and accounted for to maintain its authenticity and integrity.C.&nbsp;&nbsp;&nbsp; The general whereabouts of evidence is known.D.&nbsp;&nbsp;&nbsp; Someone knows where the evidence is and can say who had it if it is not logged. Answer: B QUESTION 239What are three ways you can enforce a BCP38 policy on an internet edge policy? (Choose three.) A.&nbsp;&nbsp;&nbsp; Avoid RFC1918 internet addressing.B.&nbsp;&nbsp;&nbsp; Implement Cisco Express Forwarding.C.&nbsp;&nbsp;&nbsp; Implement Unicast RPF.D.&nbsp;&nbsp;&nbsp; Apply ingress filters for RFC1918 addresses.E.&nbsp;&nbsp;&nbsp; Apply ingress ACL filters for BOGON routes.F.&nbsp;&nbsp;&nbsp; Implement source NAT. Answer: BCE QUESTION 240Which three addresses are special uses as defined in RFC 5735? (Choose three.) A.&nbsp;&nbsp;&nbsp; 171.10.0.0/24B.&nbsp;&nbsp;&nbsp; 0.0.0.0/8C.&nbsp;&nbsp;&nbsp; 203.0.113.0/24D.&nbsp;&nbsp;&nbsp; 192.80.90.0/24E.&nbsp;&nbsp;&nbsp; 172.16.0.0/12F.&nbsp;&nbsp;&nbsp; 198.50.100.0/24 Answer: BCE    Download the newest PassLeader 400-251 dumps from passleader.com now! 100% Pass Guarantee! 400-251 PDF dumps &amp; 400-251 VCE dumps: http://www.passleader.com/400-251.html (366 Q&amp;As) (New Questions Are 100% Available and Wrong Answers Have Been Corrected! Free VCE simulator!) p.s. Free 400-251 dumps download from Google Drive: https://drive.google.com/open?id=0B-ob6L_QjGLpd3JLalNVS0VWbms

---------------------------------------------------


Images: 

---------------------------------------------------




---------------------------------------------------


Post date: 2017-02-14 07:45:20

Post date GMT: 2017-02-14 07:45:20

Post modified date: 2017-02-14 07:45:20

Post modified date GMT: 2017-02-14 07:45:20



____________________________________________________________________________________________


Export of Post and Page as text file has been powered by [ Universal Post Manager ] plugin from www.gconverters.com