[Free] 2017(Apr) Ensurepass Passguide Cisco 400-251 Latest Dumps 121-130

Ensurepass
2017 April Cisco Official New Released 400-251 Q&As
100% Free Download! 100% Pass Guaranteed!
http://www.ensurepass.com/400-251.html

CCIE Security Written Exam v5.1

QUESTION 121

Refer to the exhibit. Flexible NetFlow is failing to export flow records from RouterA to your flow collector. What action can you take to allow the IPv6 flow records to be sent to the colle?

 

clip_image002

 

A.

Set the NetFlow export protocol to v5

B.

Configure the output-features command for the IPV4-EXPORTER

C.

Add the ipv6 cef command to the configuration

D.

Remove the ip cef command from the configuration

E.

Create a new flow exporter with an IPv6 destination and apply it to the flow monitor

 

Correct Answer: D

 

 

QUESTION 122

DRAG DROP

Drag each type of spoofing attack on the left on an action you can take to prevent it on the right.

 

clip_image004

 

Correct Answer:

clip_image006

 

 

QUESTION 123

When you configure an ASA with RADIUS authentication and authorization, which attribute is used to differentiate user roles?

 

A.

login-ip-host

B.

cisco-priv-level

C.

service-type

D.

termination-action

E.

tunnel-type

 

Correct Answer: C

 

 

QUESTION 124

Which two statement about the IPv6 Hop-by-Hop option extension header (EH. are true? (Choose two)

 

A.

The Hop-by-Hop EH is processed in hardware at the source and the destination devices only.

B.

If present, network devices must process the Hop-by-Hop EH first.

C.

The Hop-by-Hop extension header is processed by the CPU by network devices.

D.

The Hop-by-Hop EH is processed in hardware by all intermediate network devices.

E.

The Hop-by-Hop EH is encrypted by the Encapsulating Security Header.

F.

If present the Hop-by-Hop EH must follow the Mobility EH.

 

Correct Answer: BC

 

 

QUESTION 125

Which two current RFCs discuss special use IP addresses that may be used as a checklist of invalid routing prefixes for IPv4 and IPv6 addresses? (Choose two.)

 

A.

RFC 5156

B.

RFC 5735

C.

RFC 3330

D.

RFC 1918

E.

RFC 2827

 

Correct Answer: AB

 

 

QUESTION 126

Refer to the exhibit. Which configuration option will correctly process network authentication and authorization using both single port?

 

clip_image007

 

A.

clip_image008

B.

clip_image009

C.

clip_image010

D.

clip_image011

 

Correct Answer: B

 

 

QUESTION 127

What are two protocols that HTTP can use to secure sessions? (Choose two)

 

A.

HTTPS

B.

AES

C.

TLS

D.

AH

E.

SSL

 

Correct Answer: AE

 

 

QUESTION 128

Which three statements about the IANA are true? (Choose three.)

 

A.

IANA is a department that is operated by the IETF

B.

IANA oversees global IP address allocation.

C.

IANA managed the root zone in the DNS.

D.

IANA is administered by the ICANN.

E.

IANA defines URI schemes for use on the Internet.

 

Correct Answer: BCD

 

 

 

QUESTION 129

A cloud service provider is designing a large multilenant data center to support thousands of tenants. The provider is concerned about the scalability of the Layer 2 network and providing Layer 2 segmentation to potentially thousands of tenants. Which Layer 2 technology is best suited in this scenario?

 

A.

LDP

B.

VXLAN

C.

VRF

D.

Extended VLAN ranges

 

Correct Answer: B

 

 

QUESTION 130

Refer to the exhibit. Which effect of this configuratioin is true?

 

clip_image013

 

A.

The router sends PIM messages only to other routers on the same LAN.

B.

The router sends PIM messages, but it rejects any PIM message it receives.

C.

The router acts as a stub multicast router for the EIGRP routing protocol.

D.

The router accepts all PIM control messages.

E.

The router acts as the DR and DF for all bidir-PIM group ranges.

 

Correct Answer: E

100% Free Download!
—Download Free Demo:400-251 Demo PDF
100% Pass Guaranteed!
Download 2017 Ensurepass 400-251 Full Exam PDF and VCE Q&As:315
—Get 10% off your purchase! Copy it:8GTC-8UIE-M1SC [2017.04.01-2017.04.30]

Ensurepass ExamCollection Testking
Lowest Price Guarantee Yes No No
Up-to-Dated Yes No No
Real Questions Yes No No
Explanation Yes No No
PDF + VCE Yes No No
Free VCE Simulator Yes No No
Instant Download Yes No No

2017 Ensurepass IT Certification PDF and VCE

HOT EXAM!
Proudly powered by WordPress   Premium Style Theme by www.gopiplus.com