[Free] 2017(Oct) EnsurePass Examcollection Cisco 400-251 Dumps with VCE and PDF 121-130

EnsurePass
2017 Oct Cisco Official New Released 400-251
100% Free Download! 100% Pass Guaranteed!
http://www.EnsurePass.com/400-251.html

CCIE Security Written Exam (v5.0)

Question No: 121 – (Topic 2)

Ensurepass 2017 PDF and VCE

Refer to the exhibit You have received an advisory that your organization could be running a vulnerable product. Using the Cisco Systems Rapid Risk Vulnerability Model, you determine that * Your organization is running an affected product on a vulnerable version of code vulnerable component is enabled and there is no feasible workaround * There is medium confidence of an attack without significant collateral damage to the organization.

According to the model what is the appropriate urgency for remediation?

  1. priority maintenance process

  2. contact ISP to trace attack

  3. no action required

  4. remove vulnerable device from service

  5. standard maintenance process

  6. immediate mitigation process

Answer: E

Question No: 122 – (Topic 2)

Which two statements about the 3DES encryption protocol are true?(Choose two)

  1. It can operate in the Electronic Code Book and Asymmetric Block Chaining modes.

  2. Its effective key length is 168 bits.

  3. It encrypts and decrypts data in three 64-bit blocks with an overall key length of 192 bits.

  4. The algorithm is most efficient when it is implemented in software instead of hardware.

  5. It encrypts and decrypts data in three 56-bit blocks with an overall key length of 168 bits.

  6. Its effective key length is 112 bits.

Answer: E,F

Question No: 123 – (Topic 2)

Which command sequence can you enter to enable IP multicast for WCCPv2?

  1. Router(config)#ip wccp web-cache service-list Router(config)#interface FastEthernet0/0 Router(config)#ip wccp web-cache group-listen

  2. Router(config)#ip wccp web-cache group-list Router(config)#interface FastEthernet0/0 Router(config)#ip wccp web-cache group-listen

  3. Router(config)#ip wccp web-cache group-address 224.1.1.100 Router(config)#interface FastEthernet0/0

    Router(config)#ip wccp web-cache redirect in

  4. Router(config)#ip wccp web-cache group-address 224.1.1.100 Router(config)#interface FastEthernet0/0

    Router(config)#ip wccp web-cache group-listen

  5. Router(config)#ip wccp web-cache group-address 224.1.1.100 Router(config)#interface FastEthernet0/0

Router(config)#ip wccp web-cache redirect out

Answer: D

Question No: 124 – (Topic 2)

Ensurepass 2017 PDF and VCE

Refer to the exhibit. Which effect of this configuratioin is true?

  1. The router sends PIM messages only to other routers on the same LAN.

  2. The router sends PIM messages, but it rejects any PIM message it receives.

  3. The router acts as a stub multicast router for the EIGRP routing protocol.

  4. The router accepts all PIM control messages.

  5. The router acts as the DR and DF for all bidir-PIM group ranges.

Answer: E

Question No: 125 – (Topic 2)

Which two statements about implementing GDOI in a DMVPN network are true?(Choose true)

  1. Direct spoke-to-spoke traffic is black-holed.

  2. Rekeying requires an exclusive IGMP join in the mGRE interface

  3. The crypto map is applied to the sub interface of each spoke.

  4. If a group member rekey operation fails, it must wait for the SA lifetime to expire before it can reregister with the key server.

  5. The DMVPN hub can act as the GDOI key server.

  6. DMVPN spokes with tunnel protection allow traffic to be encrypted to the hub

Answer: D,E

Question No: 126 DRAG DROP – (Topic 2)

Drag each field in authentication header on the left into the order in which it appears in the header on the right?

Ensurepass 2017 PDF and VCE

Answer:

Ensurepass 2017 PDF and VCE

Explanation:

1: Next header; 2: Payload; 3: Reserved; 4: Security Parameter Index; 5: Sequence #; 6: Authentication data.

Question No: 127 – (Topic 2)

Which two options are system requirements for single sign-on on Cisco Unified Communications Manager? (Choose two)

  1. OpenAM must be deployed in a different domain Microsoft Active Directory.

  2. All participating entities must have their clocks synchronized.

  3. The local user profile on Cisco Unified Communications must be disabled.

  4. IWA and Kerberos authentication must be configured in the Windows domain.

  5. Microsoft Active Directory must be deployed in a domain-based configuration.

Answer: B,E

Question No: 128 – (Topic 2)

Ensurepass 2017 PDF and VCE

Refer to the EXHIBIT .what is the effect of the given configuration?

  1. It will Drop all TTL packet with a value of 14 in the IP header field.

  2. It will Drop all TTL packet with a TTL value less than 14.

  3. It will Drop all TTL packet with a TTL value of 15 or more.

  4. It will Drop all TTL packet with a TTL value of 14 or more.

Answer: B

Question No: 129 – (Topic 2)

Ensurepass 2017 PDF and VCE

refer to the exhibit you executed the show crypto key mypubkeyrsa command to verify that the RSA key is protected and it generated the given output What command must you have entered to protect the key?

  1. crypto key export rsa pki.cisco.com pern url flash: 3des CiscoPKI

  2. crypto key decrypt rsa name pki.cisco.com passphrase CiscoPKI

  3. crypto key import rsa pki.cisco.com pern url nvram: CiscoPKI

  4. crypto key zeroize rsa CiscoPKI

  5. crypto key lock rsa name pki.cisco.com passphrase CiscoPKI

Answer: E

Question No: 130 – (Topic 2)

Ensurepass 2017 PDF and VCE

Refer to the Exhibit, What is a possible reason for the given error?

  1. One or more require application failed to respond.

  2. The IPS engine is busy building cache files.

  3. The IPS engine I waiting for a CLI session to terminate.

  4. The virtual sensor is still initializing.

Answer: D

100% Free Download!
Download Free Demo:400-251 Demo PDF
100% Pass Guaranteed!
Download 2017 EnsurePass 400-251 Full Exam PDF and VCE

EnsurePass ExamCollection Testking
Lowest Price Guarantee Yes No No
Up-to-Dated Yes No No
Real Questions Yes No No
Explanation Yes No No
PDF VCE Yes No No
Free VCE Simulator Yes No No
Instant Download Yes No No

2017 EnsurePass IT Certification PDF and VCE

You must be logged in to post a comment.

Proudly powered by WordPress   Premium Style Theme by www.gopiplus.com