This page was exported from Braindump2go Free Exam Dumps with PDF and VCE Collection [ https://www.mcitpdump.com ]

Export date:Fri Nov 22 0:23:07 2024 / +0000 GMT

___________________________________________________


Title: [2017-New]Cisco 400-251 VCE PDF Dumps Free Download in Braindump2go[Q116-Q130]

---------------------------------------------------


2017 CISCO Official News: 350-018 Exam is Replaced by 400-251 Written Exam Now! 2017 New 400-251: CCIE Security Written Exam v5.1 PDF and VCE Dumps Just Released Today by Braindump2go.com! 1.|2017 NEW 400-251 Written Exam Dumps (PDF &amp; VCE) 1106Q&amp;As&nbsp; Download:http://www.braindump2go.com/400-251.html 2.|2017 NEW 400-251 Written Exam Questions &amp; Answers:http://www.braindump2go.com/400-251.html &nbsp; QUESTION 116A server with Ip address 209.165.202.150 is protected behind the inside of a cisco ASA or PIX security appliance and the internet on the outside interface. User on the internet need to access the server at any time but the firewall administrator does not want to apply NAT to the address of the server because it is currently a public address, which three of the following command can be used to accomplish this? (Choose three) A.&nbsp;&nbsp;&nbsp; static (inside,outside) 209.165.202.150 209.165.202.150 netmask 255.255.255.2"B.&nbsp;&nbsp;&nbsp; nat (inside) 1 209.165.202.150 255.255.255.255C.&nbsp;&nbsp;&nbsp; no nat-controlD.&nbsp;&nbsp;&nbsp; nat (inside) 0 209.16S.202.150 255.255.255.255E.&nbsp;&nbsp;&nbsp; static (outside.insid) 209.165.202.150 209.165.202.150 netmask 255.255.255.255F.&nbsp;&nbsp;&nbsp; access-tist no-nat permit ip host 209.165.202.150 any nat (inside) 0 access-list no-nat Answer: ADF QUESTION 117Which three statements about RLDP are true? (Choose three) A.&nbsp;&nbsp;&nbsp; It can detect rogue Aps that use WPA encryptionB.&nbsp;&nbsp;&nbsp; It detects rogue access points that are connected to the wired networkC.&nbsp;&nbsp;&nbsp; The AP is unable to serve clients while the RLDP process is activeD.&nbsp;&nbsp;&nbsp; It can detect rogue APs operating only on 5 GHzE.&nbsp;&nbsp;&nbsp; Active Rogue Containment can be initiated manually against rogue devices detected on the wired networkF.&nbsp;&nbsp;&nbsp; It can detect rogue APs that use WEP encryption Answer: ABD QUESTION 118Which Cisco ASA firewall mode supports ASDM one-time-password authentication using RSA SecurID? A.&nbsp;&nbsp;&nbsp; Network translation modeB.&nbsp;&nbsp;&nbsp; Single-context routed modeC.&nbsp;&nbsp;&nbsp; Multiple-context modeD.&nbsp;&nbsp;&nbsp; Transparent mode Answer: B QUESTION 119Refer to the exhibit. A signature failed to compile and returned the given error messages.What is a possible reason for the problem?&nbsp; A.&nbsp;&nbsp;&nbsp; The signature belongs to the IOS IPS Basic category.B.&nbsp;&nbsp;&nbsp; The signature belongs to the IOS IPS Advanced category.C.&nbsp;&nbsp;&nbsp; There is insufficient memory to compile the signature.D.&nbsp;&nbsp;&nbsp; The signature is retired.E.&nbsp;&nbsp;&nbsp; Additional signature must be complied during the compiling process. Answer: C QUESTION 120Which command sequence can you enter to enable IP multicast for WCCPv2? A.&nbsp;&nbsp;&nbsp; Router(config)#ip wccp web-cache service-list Router(config)#interface FastEthernet0/0Router(config)#ip wccp web-cache group-listenB.&nbsp;&nbsp;&nbsp; Router(config)#ip wccp web-cache group-listRouter(config)#interface FastEthernet0/0Router(config)#ip wccp web-cache group-listenC.&nbsp;&nbsp;&nbsp; Router(config)#ip wccp web-cache group-address 224.1.1.100 Router(config)#interface FastEthernet0/0Router(config)#ip wccp web-cache redirect inD.&nbsp;&nbsp;&nbsp; Router(config)#ip wccp web-cache group-address 224.1.1.100 Router(config)#interface FastEthernet0/0Router(config)#ip wccp web-cache group-listenE.&nbsp;&nbsp;&nbsp; Router(config)#ip wccp web-cache group-address 224.1.1.100 Router(config)#interface FastEthernet0/0Router(config)#ip wccp web-cache redirect out Answer: D QUESTION 121The computer at 10.10.10.4 on your network has been infected by a botnet that directs traffic to a malware site at 168.65.201.120. Assuming that filtering will be performed on a Cisco ASA.What command can you use to block all current and future connections from the infected host? A.&nbsp;&nbsp;&nbsp; ip access-list extended BLOCK_BOT_OUT deny ip any host 10.10.10.4B.&nbsp;&nbsp;&nbsp; shun 10.10.10.4 168.65.201.120 6000 80C.&nbsp;&nbsp;&nbsp; ip access-list extended BLOCK_BOT_OUT deny ip host 10.10.10.4 host 168.65.201.120D.&nbsp;&nbsp;&nbsp; ip access-list extended BLOCK_BOT_OUT deny ip host 168.65.201.120 host 10.10.10.4E.&nbsp;&nbsp;&nbsp; shun 168.65.201.120 10.10.10.4 6000 80 Answer: C QUESTION 122IKEv2 provide greater network attack resiliency against a DoS attack than IKEv1 by utilizing which two functionalities?(Choose two) A.&nbsp;&nbsp;&nbsp; with cookie challenge IKEv2 does not track the state of the initiator until the initiator respond with cookie.B.&nbsp;&nbsp;&nbsp; Ikev2 perform TCP intercept on all secure connectionsC.&nbsp;&nbsp;&nbsp; IKEv2 only allows symmetric keys for peer authenticationD.&nbsp;&nbsp;&nbsp; IKEv2 interoperates with IKEv1 to increase security in IKEv1E.&nbsp;&nbsp;&nbsp; IKEv2 only allows certificates for peer authenticationF.&nbsp;&nbsp;&nbsp; An IKEv2 responder does not initiate a DH exchange until the initiator responds with a cookie Answer: AF QUESTION 123Which five of these are criteria for rule-based rogue classification of access points by the cisco Wireless LAN controller? (Choose five) A.&nbsp;&nbsp;&nbsp; MAC address rangeB.&nbsp;&nbsp;&nbsp; MAC address range number of clients it hasC.&nbsp;&nbsp;&nbsp; open authenticationD.&nbsp;&nbsp;&nbsp; whether it matches a user-configured SSIDE.&nbsp;&nbsp;&nbsp; whether it operates on an authorized channelF.&nbsp;&nbsp;&nbsp; minimum RSSIG.&nbsp;&nbsp;&nbsp; time of day the rogue operatesH.&nbsp;&nbsp;&nbsp; Whether it matches a managed AP SSID Answer: BCDFH QUESTION 124Which two statement about the DES algorithm are true?(Choose two) A.&nbsp;&nbsp;&nbsp; It uses a 64-bit key block size and its effective key length is 65 bitsB.&nbsp;&nbsp;&nbsp; It uses a 64-bits key block size and its effective key length is 56 bitsC.&nbsp;&nbsp;&nbsp; It is a stream cripher that can be used with any size inputD.&nbsp;&nbsp;&nbsp; It is more efficient in software implements than hardware implementations.E.&nbsp;&nbsp;&nbsp; It is vulnerable to differential and linear cryptanalysisF.&nbsp;&nbsp;&nbsp; It is resistant to square attacks Answer: BE QUESTION 125Which three types of addresses can the Botnet Traffic Filter feature of the Cisco ASA monitor? (Choose three)&nbsp;&nbsp; A.&nbsp;&nbsp;&nbsp; Ambiguous addressesB.&nbsp;&nbsp;&nbsp; Known malware addressesC.&nbsp;&nbsp;&nbsp; Listed addressesD.&nbsp;&nbsp;&nbsp; Dynamic addressesE.&nbsp;&nbsp;&nbsp; Internal addressesF.&nbsp;&nbsp;&nbsp; Known allowed addresses Answer: ABF QUESTION 126Which Three statement about cisco IPS manager express are true? (Choose three) A.&nbsp;&nbsp;&nbsp; It provides a customizable view of events statistics.B.&nbsp;&nbsp;&nbsp; It Can provision policies based on risk rating.C.&nbsp;&nbsp;&nbsp; It Can provision policies based on signatures.D.&nbsp;&nbsp;&nbsp; It Can provision policies based on IP addresses and ports.E.&nbsp;&nbsp;&nbsp; It uses vulnerability-focused signature to protect against zero-day attacks.F.&nbsp;&nbsp;&nbsp; It supports up to 10 sensors. Answer: ABF QUESTION 127In Cisco Wireless LAN Controller (WLC. which web policy enables failed Layer 2 authentication to fall back to WebAuth authentication with a user name and password? A.&nbsp;&nbsp;&nbsp; On MAC Filter FailureB.&nbsp;&nbsp;&nbsp; Pass throughC.&nbsp;&nbsp;&nbsp; Splash Page Web RedirectD.&nbsp;&nbsp;&nbsp; Conditional Web RedirectE.&nbsp;&nbsp;&nbsp; Authentication Answer: A QUESTION 128Drag and Drop QuestionDrag and drop each syslog facility code on the left onto its description on the right.&nbsp;Answer: &nbsp; QUESTION 129Refer to the exhibit. What is the effect of the given configuration?&nbsp; A.&nbsp;&nbsp;&nbsp; It reset and logs FTP connection to all sites except cisco.com and hp.com.B.&nbsp;&nbsp;&nbsp; FTP connections are unaffected.C.&nbsp;&nbsp;&nbsp; It resets FTP connection to all sites except cisco.com and hp.com.D.&nbsp;&nbsp;&nbsp; It resets and logs FTP connection to cisco.com and hp.com only.E.&nbsp;&nbsp;&nbsp; It resets FPT connection to cisco.com and hp.com only Answer: A QUESTION 130What port has IANA assigned to the GDOI protocol ? A.&nbsp;&nbsp;&nbsp; UDP 4500B.&nbsp;&nbsp;&nbsp; UDP 1812aC.&nbsp;&nbsp;&nbsp; UDP 500D.&nbsp;&nbsp;&nbsp; UDP 848 Answer: D   !!! RECOMMEND!!!  1.|2017 NEW 400-251 Exam Dumps (PDF &amp; VCE) 1106Q&amp;As&nbsp; Download:http://www.braindump2go.com/400-251.html 2.|2017 NEW 400-251 Study Guide Video: YouTube Video: YouTube.com/watch?v=GSXnXKIh834 

---------------------------------------------------


Images: 

---------------------------------------------------




---------------------------------------------------


Post date: 2017-02-15 06:52:10

Post date GMT: 2017-02-15 06:52:10

Post modified date: 2017-02-15 06:52:10

Post modified date GMT: 2017-02-15 06:52:10



____________________________________________________________________________________________


Export of Post and Page as text file has been powered by [ Universal Post Manager ] plugin from www.gconverters.com