[Free] 2017(Aug) EnsurePass Examcollection Cisco 400-251 Dumps with VCE and PDF 251-260

EnsurePass
2017 Aug Cisco Official New Released 400-251
100% Free Download! 100% Pass Guaranteed!
http://www.EnsurePass.com/400-251.html

CCIE Security Written Exam (v5.0)

Question No: 251 DRAG DROP – (Topic 2)

Drag and drop each RADIUS packet field on the left onto the matching decription on the right.

image

Answer:

image

Explanation: A-5,B-2,C-1,D-3,E-4

Question No: 252 – (Topic 2)

Which two statements about header attacks are true?(Choose Two)

  1. An attacker can use IPv6 Next Header attacks to steal user data and launch phishing attacks.

  2. An attacker can use HTTP Header attacks to launch a DoS attack.

  3. An attacker can execute a spoofing attack by populating the RH0 routing header subtype with multiple

    destination addresses.

  4. An attacker can leverage an HTTP response header to write malicious cookies.

  5. An attacker can leverage an HTTP response header to inject malicious code into an application layer.

  6. An attacker can use vulnerabilities in the IPv6 routing header to launch attacks at the application layer.

Answer: B,C

Question No: 253 – (Topic 2)

What technology can you implement on your network to allow IPv4-dependent applications to work with IPv6- capable application?

  1. NAT 6to4

  2. DS-lite

  3. NAT-PT

  4. ISATAP

  5. NAT64

Answer: E

Question No: 254 – (Topic 2)

Refer to the exhibit. Which statement about the router R1 is true?

  1. Its private-config is corrupt.

  2. Its NVRAM contains public and private crypto keys.

  3. Its running configuration is missing.

  4. RMON is configured.

Answer: B

Question No: 255 – (Topic 2)

image

Refer to the exhibit. Which effect of this configuration is true?

  1. Host_1 learns about R2 and only and prefers R2 as its default router

  2. Host_1 selects R2 as its default router and load balances between R2 and R3

  3. Host_1 learns about R2 and R3 only and prefers R3 as its default router

  4. Host_1 learns about R1,R2 and R3 and load balances between them

  5. Host_1 learns about R1, R2 and R3 and prefers R2 as its default router

Answer: E

Explanation: Which two statements about IKEv2 are true? (Choose two)

  1. It uses EAP authentication

  2. It uses X.509 certificates for authentication

  3. The profile is a collection of transforms used to negotiate IKE SAs

  4. It supports DPD and Nat-T by default

  5. The profile contains a repository of symmetric and asymmetric preshared keys

  6. At minimum, a complete proposal requires one encryption algorithm and one integrity algorithm

Answer: E,F

Question No: 256 – (Topic 2)

What feature on Cisco IOS router enables user identification and authorization based on

per-user policies

  1. CBAC

  2. IPsec

  3. Authentication proxy

  4. NetFlow v9

  5. Zone-based firewall

  6. EEM

Answer: C

Question No: 257 DRAG DROP – (Topic 2)

Drag and drop ESP header field on the left to the appropriate field length on the right

image

Answer:

image

Question No: 258 – (Topic 2)

Which two statements about the MD5 Hash are true? (Choose two.)

  1. Length of the hash value varies with the length of the message that is being hashed.

  2. Every unique message has a unique hash value.

  3. Its mathematically possible to find a pair of message that yield the same hash value.

  4. MD5 always yields a different value for the same message if repeatedly hashed.

  5. The hash value cannot be used to discover the message.

Answer: B,E

Question No: 259 – (Topic 2)

Which two statement about MSDP ate true? (Choose three)

  1. It can connect to PIM-SM and PIM-DM domains

  2. It announces multicast sources from a group

  3. The DR sends source data to the rendezvous point only at the time the source becomes active

  4. It can connect only to PIM-DM domains

  5. It registers multicast sources with the rendezvous point of a domain

  6. It allows domains to discover multicast sources in the same or different domains.

Answer: B,E,F

Question No: 260 – (Topic 2)

image

Refer to the exhibit.While troubleshooting a router issue ,you executed the show ntp associationcommand and it returned this output.Which condition is indicated by the reach value of 357?

  1. The NTP continuously received the previous 8 packets.

  2. The NTP process is waiting to receive its first acknowledgement.

  3. The NTP process failed to receive the most recent packet, but it received the 4 packets before the most recent packet.

  4. The NTP process received only the most recent packet.

Answer: C

100% Free Download!
Download Free Demo:400-251 Demo PDF
100% Pass Guaranteed!
Download 2017 EnsurePass 400-251 Full Exam PDF and VCE
Get 10% off your purchase! Copy it:TJDN-947R-9CCD [2017.07.01-2017.07.31]

EnsurePass ExamCollection Testking
Lowest Price Guarantee Yes No No
Up-to-Dated Yes No No
Real Questions Yes No No
Explanation Yes No No
PDF VCE Yes No No
Free VCE Simulator Yes No No
Instant Download Yes No No

2017 EnsurePass IT Certification PDF and VCE

You must be logged in to post a comment.

Proudly powered by WordPress   Premium Style Theme by www.gopiplus.com