[Free] 2017(Apr) Ensurepass Passguide Cisco 400-251 Latest Dumps 201-210

Ensurepass
2017 April Cisco Official New Released 400-251 Q&As
100% Free Download! 100% Pass Guaranteed!
http://www.ensurepass.com/400-251.html

CCIE Security Written Exam v5.1

QUESTION 201

Refer to the exhibit. What is the meaning of the given error massage?

 

clip_image002

 

A.

Ike is disable on the remote peer

B.

The mirrored crypto ACLs are mismatched

C.

The pre-shared keys are mismatched

D.

The PFS group are mismatched

 

Correct Answer: CQUESTION 202< /font>

Event Store is a component of which IPS application?

 

A.

SensorApp

B.

InterfaceApp

C.

MainApp

D.

NotificationApp

E.

AuthenticationApp

 

Correct Answer: C

 

 

QUESTION 203

Refer to the exhibit. What are two TLS inspection methods you could implement for outbond internet traffic that can prevent the given untrusted error? (Choose two)

 

clip_image004

 

A.

Add the self-signed CA certificate from the inspection appliance to the Trusted Root Certification Authority on the client

B.

Apply an intermediate CA certificate from a trusted authority on the inspection appliance.

C.

Download a copy of the private key from the content provider,

D.

Update your organizational procedures to instruct users to click “I Understand the Risks” to accept the error and continue

E.

Conditionally decrypt traffic based c$ trust level Store private keys in a FIPS Level 2 HSM on the inspection appliance

 

Correct Answer: AB

QUESTION 204

DRAG DROP

Drag each IPv6 extension header on the left into the recommended order for more than one extension header In the same IPv6 packet on the right.

 

clip_image006

 

Correct Answer:

clip_image008

 

 

QUESTION 205

What are two action you can take to protect against DDOS attacks on cisco router and switches? (Choose two)

 

A.

Rate limit SYN packets

B.

Filter the RFC-1918 address space

C.

configuration IP snooping

D.

implement MAC address filtering

E.

Configuration PIM-SM

 

Correct Answer: AB

 

 

 

QUESTION 206

Which two statements about SOX are true? (Choose two.)

 

A.

SOX is an IEFT compliance procedure for computer systems security.

B.

SOX is a US law.

C.

SOX is an IEEE compliance procedure for IT management to produce audit reports.

D.

SOX is a private organization that provides best practices for financial institution computer systems.

E.

Section 404 of SOX is related to IT compliance.

 

Correct Answer: BE

 

 

QUESTION 207

Which two options are disadvantages of MPLS layers 3 VPN services? (Choose two)

 

A.

They requires cooperation with the service provider to implement transport of non-IP traffic.

B.

SLAs are not supported by the service provider.

C.

It requires customers to implement QoS to manage congestion in the network.

D.

Integration between Layers 2 and 3 peering services is not supported.

E.

They may be limited by the technology offered by the service provider.

F.

They can transport only IPv6 routing traffic.

 

Correct Answer: DE

 

 

QUESTION 208

Which RFC outlines BCP 84?

 

A.

RFC 3704

B.

RFC 2827

C.

RFC 3030

D.

RFC 2267

E.

RFC 1918

 

Correct Answer:
A

 

 

QUESTION 209

Which option is a benefit of implementing RFC 2827?

 

A.

prevents DoS from legitimate, non-hostile end systems

B.

prevents disruption of special services such as Mobile IP

C.

defeats DoS attacks which employ IP source address spoofing

D.

restricts directed broadcasts at the ingress router

E.

allows DHCP or BOOTP packets to reach the relay agents as appropriate

 

Correct Answer: CQUESTION 210

Refer to the exhibit. After you configured routes R1 and R2 for IPv6 OSPFv3 authentication as shown, the OSPFv3 neighbor adjacency failed to establish. What is a possible reason for the problem?

 

clip_image010

 

A.

R2 received a packet with an incorrect area form the loopback1 interface

B.

OSPFv3 area authentication is missing

C.

R1 received a packet with an incorrect area from the FastEthernet0/0 interface

D.

The SPI and the authentication key are unencrypted

E.

The SPI value and the key are the same on both R1 and R2

 

Correct Answer: C

100% Free Download!
—Download Free Demo:400-251 Demo PDF
100% Pass Guaranteed!
Download 2017 Ensurepass 400-251 Full Exam PDF and VCE Q&As:315
—Get 10% off your purchase! Copy it:8GTC-8UIE-M1SC [2017.04.01-2017.04.30]

Ensurepass ExamCollection Testking
Lowest Price Guarantee Yes No No
Up-to-Dated Yes No No
Real Questions Yes No No
Explanation Yes No No
PDF + VCE Yes No No
Free VCE Simulator Yes No No
Instant Download Yes No No

2017 Ensurepass IT Certification PDF and VCE

Proudly powered by WordPress   Premium Style Theme by www.gopiplus.com