[Free] 2017(Apr) Ensurepass Passguide Cisco 400-251 Latest Dumps 151-160

Ensurepass
2017 April Cisco Official New Released 400-251 Q&As
100% Free Download! 100% Pass Guaranteed!
http://www.ensurepass.com/400-251.html

CCIE Security Written Exam v5.1

QUESTION 151

Which statement regarding the routing functions of the Cisco ASA is true running software version 9.2?

 

A.

In a failover pair of ASAs, the standby firewall establishes a peer relationship with OSPF neighbors

B.

The ASA supports policy-based routing with route maps

C.

Routes to the Null0 interface cannot be configured to black-hole traffic

D.

The translations table cannot override the routing table for new connections

 

Correct Answer: C

 

 

QUESTION 152

Which two statement about router Advertisement message are true? (Choose two)

 

A.

Local link prefixes are shared automatically.

B.

Each prefix included in the advertisement carries lifetime information f Or that prefix.

C.

Massage are sent to the miscast address FF02::1

D.

It support a configurable number of retransmission attempts for neighbor solicitation massage.

E.

Flag setting are shared in the massage and retransmitted on the link.

F.

Router solicitation massage are sent in response to router advertisement massage

 

Correct Answer: AF

 

 

QUESTION 153

Refer to the exhibit. Which effect of this configuration is true?

 

clip_image002

 

A.

NUD retransmits 1000 Neighbor solicitation messages every 4 hours and 4 minutes.

B.

NUD retransmits Neighbor Solicitation messages after 4, 16, 64 and 256 seconds.

C.

NUD retransmits Neighbor Solicitation messages every 4 seconds.

D.

NUD retransmits unsolicited Neighbor advertisements messages every 4 hours.

E.

NUD retransmits f our Neighbor Solicitation messages every 1000 seconds.

F.

NUD retransmits Neighbor Solicitation messages after 1, 4, 16, and 64 seconds.

 

Correct Answer: E

 

 

QUESTION 154

What are two features of cisco IOS that can help mitigate Blaster worm attack on RPC ports? (Choose two)

 

A.

FPM

B.

DCAR

C.

NBAR

D.

IP source Guard

E.

URPF

F.

Dynamic ARP inspection

 

Correct Answer: DE

 

 

QUESTION 155

Which two statement about the multicast addresses query message are true? (Choose two)

 

A.

They are solicited when a node initialized the multicast process.

B.

They are used to discover the multicast group to which listeners on a link are subscribed

C.

They are used to discover whether a specified multicast address has listeners

D.

They are send unsolicited when a node initializes the multicast process

E.

They are usually sent only by a single router on a link

F.

They are sent when a node discover a multicast group

 

Correct Answer: BC

 

 

QUESTION 156

Refer to the exhibit. What IPSec function does the given debug output demonstrate?

 

A.

DH exchange initiation

B.

setting SPIs to pass traffic

C.

PFS parameter negotiation

D.

crypto ACL confirmation

 

Correct Answer: B

 

 

QUESTION 157

IANA is responsible for which three IP resources? (Choose three.)

 

A.

IP address allocation

B.

Detection of spoofed address

C.

Criminal prosecution of hackers

D.

Autonomous system number allocation

E.

Root zone management in DNS

F.

BGP protocol vulnerabilities

 

Correct Answer: ADE

QUESTION 158

DRAG DROP

Drag each MACsec term on the left to the right matching statement on the right.

 

clip_image004

 

Correct Answer:

clip_image006

 

 

QUESTION 159

When you are configuring QoS on the Cisco ASA appliance. Which four are valid traffic selection criteria? (Choose four)

 

A.

default-inspection-traffic

B.

qos-group

C.

DSCP

D.

VPN group

E.

tunnel group

F.

IP precedence

 

Correct Answer: ACEFQUESTION 160

Which two statements about the anti-replay feature are true? (Choose two)

 

A.

By default, the sender uses a single 1024-packet sliding window

B.

By default, the receiver uses a single 64-packet sliding window

C.

The sender assigns two unique sequence numbers to each clear-text packet

D.

The sender assigns two unique sequence numbers to each encrypted packet

E.

the receiver performs a hash of each packet in the window to detect replays

F.

The replay error counter is incremented only when a packet is dropped

 

Correct Answer: BD

100% Free Download!
—Download Free Demo:400-251 Demo PDF
100% Pass Guaranteed!
Download 2017 Ensurepass 400-251 Full Exam PDF and VCE Q&As:315
—Get 10% off your purchase! Copy it:8GTC-8UIE-M1SC [2017.04.01-2017.04.30]

Ensurepass ExamCollection Testking
Lowest Price Guarantee Yes No No
Up-to-Dated Yes No No
Real Questions Yes No No
Explanation Yes No No
PDF + VCE Yes No No
Free VCE Simulator Yes No No
Instant Download Yes No No

2017 Ensurepass IT Certification PDF and VCE

HOT EXAM!
Proudly powered by WordPress   Premium Style Theme by www.gopiplus.com