[Free] 2017(Apr) Ensurepass Passguide Cisco 400-251 Latest Dumps 1-10

Ensurepass
2017 April Cisco Official New Released 400-251 Q&As
100% Free Download! 100% Pass Guaranteed!
http://www.ensurepass.com/400-251.html

CCIE Security Written Exam v5.1

QUESTION 1

Which two OSPF network types support the concept of a designated router? (Choose two.)

 

A.

broadcast

B.

NBMA

C.

point-to-multipoint

D.

point-to-multipoint nonbroadcast

E.

loopback

 

Correct Answer: AB

 

 

QUESTION 2

Given the IPv4 address 10.10.100.16, which two address are valid IPv4-compatible IPv6 addresses? (Choose two)

 

A.

0:0:0:0:0:10:10:100:16

B.

0:0:10:10:10:16:0:0:0

C.

0:0:10:10:100:16:0:0:0

D.

::10:10:100:16

E.

:::A:A:64:10

 

Correct Answer: AD

 

 

QUESTION 3

What technology can you implement on your network to allow IPv4-dependent applications to work with IPv6- capable application?

 

A.

NAT 6to4

B.

DS-lite

C.

NAT-PT

D.

ISATAP

E.

NAT64

 

Correct Answer: E

 

 

QUESTION 4

Which three fields are part of the AH header? (Choose three)

 

A.

Destination address

B.

Protocol ID

C.

Packet ICV

D.

SPI identifying SA

E.

Next header

F.

Application port

G.

Source address

 

Correct Answer: CDE

 

 

QUESTION 5

What ASA feature can do use to restrict a user to a specific VPN group?

 

A.

A webtypeACL

B.

MPF

C.

A VPN filter

D.

Group-lock

 

Correct Answer: D

 

 

QUESTION 6

Which two statements about SGT Exchange Protocol are true? (Choose two)

 

A.

It propagates the IP-to-SGT binding table across network devices that do not have the ability to perform SGT tagging at Layer 2 to devices that support it

B.

SXP runs on UDP port 64999

C.

A connection is established between a “listener” and a “speaker”

D.

SXP is only supported across two hops

E.

SXPv2 introduces connection security via TLS

 

Correct Answer: AC

 

 

QUESTION 7

Which three statements are true regarding RFC 5176 (Change of Authorization)? (Choose three.)

 

A.

It defines a mechanism to allow a RADIUS server to initiate a communication inbound to a NAD.

B.

It defines a wide variety of authorization actions, including “reauthenticate.”

C.

It defines the format for a Change of Authorization packet.

D.

It defines a DM.

E.

It specifies that TCP port 3799 be used for transport of Change of Authorization packets.

 

Correct Answer: ACD

 

 

QUESTION 8

How does a wireless association flood attack create a DoS?

 

A.

It sends a high-power RF pulse that can damage the internals of the AP

B.

It spoofs disassociation frames from the access point.

C.

It uses a brute force attack to crack the encryption.

D.

It exhausts the access client association table.

 

Correct Answer: D

 

 

QUESTION 9

What are two feature that can be used to drop incoming traffic with spoofed bogon address? (Choose two)

 

A.

Unicast RPF

B.

ingress ACLs

C.

flexible ACLs

D.

egress ACLs

E.

reflexive ACLs

F.

Source Specific Multicast

 

Correct Answer: AB

 

 

QUESTION 10

Refer to the exhibit, you have configured two route-map instances on R1 which passes traffic from switch 1 on both VLAN 1 and VLAN 2. You wish to ensure that*the first route-map instance matches packets from VLAN 1 and sets next hop to 3232::2/128.* the second route-map instance matches packets from VLAN 2 and sets the next hop to 3232::3/128. What feature can you implement on R1 to make this configuration possible?

 

clip_image002

 

A.

PBR

B.

BGP local-preference

C.

BGP next-hop

D.

VSSP

E.

GLBP

 

Correct Answer: C

100% Free Download!
—Download Free Demo:400-251 Demo PDF
100% Pass Guaranteed!
Download 2017 Ensurepass 400-251 Full Exam PDF and VCE Q&As:315
—Get 10% off your purchase! Copy it:8GTC-8UIE-M1SC [2017.04.01-2017.04.30]

Ensurepass ExamCollection Testking
Lowest Price Guarantee Yes No No
Up-to-Dated Yes No No
Real Questions Yes No No
Explanation Yes No No
PDF + VCE Yes No No
Free VCE Simulator Yes No No
Instant Download Yes No No

2017 Ensurepass IT Certification PDF and VCE

HOT EXAM!
Proudly powered by WordPress   Premium Style Theme by www.gopiplus.com