[Free] 2017(Apr) Ensurepass Passguide Cisco 400-251 Latest Dumps 51-60

Ensurepass
2017 April Cisco Official New Released 400-251 Q&As
100% Free Download! 100% Pass Guaranteed!
http://www.ensurepass.com/400-251.html

CCIE Security Written Exam v5.1

QUESTION 51

Which two statements about Cisco ASA authentication using LDAP are true? (Choose two)

 

A.

It uses attribute maps to map the AD memberOf attribute to the cisco ASA Group-Poilcy attribute

B.

It uses AD attribute maps to assign users to group policies configured under the WebVPN context

C.

The Cisco ASA can use more than one AD memberOf attribute to match a user to multiple group policies

D.

It can assign a group policy to a user based on access credentials

E.

It can combine AD attributes and LDP attributes to configure group policies on the Cisco ASA

F.

It is a closed standard that manages directory-information services over distributed networks

 

Correct Answer: AB

 

 

QUESTION 52

What technique can an attacker use to obfuscate a malware application payload, allowing it to bypass standard security mechanisms?

 

A.

Teredo tunnelling

B.

Decryption

C.

A PE32 header

D.

Steganogr
aphy

E.

BASE64

Correct Answer: E

 

 

QUESTION 53

DRAG DROP

clip_image001

 

Correct Answer:

clip_image002

 

 

QUESTION 54

Refer to the exhibit. What feature must be implemented on the network to produce the given output?

 

A.

PQ

B.

CQ

C.

WFQ

D.

NBAR

E.

CAR

 

Correct Answer: DQUESTION 55

DRAG DROP

Drag each EAP variant in the 802.1x framework to the matching statement on the right.

 

clip_image004

 

Correct Answer:

clip_image006

 

 

QUESTION 56

Which two options are benefits of shortcut Switching Enhancements for NHRP on DMVPN networks? (Choose two)

 

A.

Its enables the NHRP FIB lookup process to perform route summarization on the hub.

B.

It allows data packets to be fast switched while spoke-to-spoke tunnels are being established.

C.

It is most beneficial with partial full-mesh DVMPN setup.

D.

It supports layered network topologies with the central hubs and direct spoke-to-spoke tunnels between spokes on different hubs.

E.

It enables spokes to use a summary route to build spoke-to-spoke tunnels.

 

Correct Answer: BE

 

 

QUESTION 57

Which two statements about the DES algorithm are true? (Choose two)

 

A.

The DES algorithm is based on asymmetric cryptography.

B.

The DES algorithm is a stream cipher.

C.

The DES algorithm is based on symmetric cryptography.

D.

The DES algorithm encrypts a block of 128 bits.

E.

The DES algorithm uses a 56-bit key.

 

Correct Answer: CE

 

 

QUESTION 58

What are the two IPSec modes? (Choose two)

 

A.

Aggressive

B.

ISAKMP

C.

Transport

D.

IKE

E.

Main

F.

Tunnel

 

Correct Answer: CF

 

 

QUESTION 59

Which two options are unicast address types for IPv6 addressing? (Choose two)

 

A.

Established

B.

Static

C.

Global

D.

Dynamic

E.

Link-local

 

Correct Answer: CE

 

 

QUESTION 60

What are the two technologies that support AFT? (Choose two)

 

A.

SNAT

B.

NAT -6to4

C.

DNAT

D.

NAT -PT

E.

NAT -PMP

F.

NAT64

 

Correct Answer: DF

100% Free Download!
—Download Free Demo:400-251 Demo PDF
100% Pass Guaranteed!
Download 2017 Ensurepass 400-251 Full Exam PDF and VCE Q&As:315
—Get 10% off your purchase! Copy it:8GTC-8UIE-M1SC [2017.04.01-2017.04.30]

Ensurepass ExamCollection Testking
Lowest Price Guarantee Yes No No
Up-to-Dated Yes No No
Real Questions Yes No No
Explanation Yes No No
PDF + VCE Yes No No
Free VCE Simulator Yes No No
Instant Download Yes No No

2017 Ensurepass IT Certification PDF and VCE

HOT EXAM!
Proudly powered by WordPress   Premium Style Theme by www.gopiplus.com