Ensurepass.com : Ensure you pass the IT Exams
2018 Aug Cisco Official New Released 400-251
100% Free Download! 100% Pass Guaranteed!
CCIE Security Written Exam (v5.0)
Question No: 171 – (Topic 2)
Which three of these situation warrant engagement of a security incident Response
team?(Choose three)
-
damage to computer/network resources
-
pornographic biogs#39;websites
-
computer or network misuse/abuse
-
denial of service (DoS)
-
loss of data confidentialitymtegrity
Answer: C,D,E
Question No: 172 – (Topic 2)
when a host initiates a TCP session, what is the numerical range into which the initial sequence number must fail?
A. 0 to 65535
B. 1 to 1024
C. 0 to 4,294,967,295
D. 1 to 65535
E. 1 to 4,294,967,295
F. 0 to 1024
Answer: C
Question No: 173 – (Topic 2)
Refer to the exhibit, which configuration prevents R2 from become a PIM neighbor with R1?
A. Access-list 10 deny 192.168.1.2.0.0.0.0
!
Interface gi0/0
Ippim neighbor-filter 1
B. Access-list 10 deny 192.168.1.2.0.0.0.0
!
Interface gi0/0
Ipigmp access-group 10
C. Access-list 10 deny 192.168.1.2.0.0.0.0
!
Interface gi0/0 Ippimneighbour-filter 10
D. Access-list 10 permit 192.168.1.2.0.0.0.0
!
Interface gi0/0
Ippim neighbor-filter 10
Answer: D
Question No: 174 – (Topic 2)
Refer to the exhibit. Which effect of this configuration is true?
-
It enables MLD query messages for all link-local groups.
-
It configures the node to generate a link-local group report when it joins the solicited- node multicast group.
-
It enables hosts to send MLD report messages for groups 224.0.0.0/24.
-
it enables local group membership for MLDv1 and MLDv2.
-
It enables the host to send MLD report messages for nonlink local groups.
Answer: C
Question No: 175 – (Topic 2)
Which two statement about the Cisco ASA in a transparent-mode deployment are true? (Choose two)
-
It block all ARP packets by default.
-
It supports QoS.
-
It supports iBGP.
-
It can act as a DHCP server.
-
It performs a MAC address look to forward traffic f) It performs a route lookup to forward traffic.
Answer: D,E
Question No: 176 – (Topic 2)
What are two characteristics of RPL, used in loT environments? (Choose two)
-
It is an Exterior Gateway Protocol
-
It is a Interior Gateway Protocol
-
It is a hybrid protocol
-
It is link-state protocol
-
It is a distance-vector protocol
Answer: B,E
Question No: 177 – (Topic 2)
Which two statements about Network Edge Authentication Technology (NEAT) are true? (Choose two)
-
It requires a standard ACL on the switch port
-
It conflicts with auto-configuration
-
It allows you to configure redundant links between authenticator and supplicant switches
-
It supports port-based authentication on the authenticator switch
-
It can be configured on both access ports and trunk ports
-
It can be configured on both access ports and EtherChannel ports
Answer: D,E
Question No: 178 – (Topic 2)
Which one of the following Cisco ASA adaptive security appliance rule samples will send HTTP data to the AIP- SSM module to evaluate and stop HTTP attacks?
A)
B)
C)
D)
-
Option A
-
Option B
-
Option C
-
Option D Answer: C
Question No: 179 – (Topic 2)
Refer to the exhibit. Which effect of this configuration is true?
-
NUD retransmits 1000 Neighbor solicitation messages every 4 hours and 4 minutes.
-
NUD retransmits Neighbor Solicitation messages after 4, 16, 64 and 256 seconds.
-
NUD retransmits Neighbor Solicitation messages every 4 seconds.
-
NUD retransmits unsolicited Neighbor advertisements messages every 4 hours.
-
NUD retransmits f our Neighbor Solicitation messages every 1000 seconds.
-
NUD retransmits Neighbor Solicitation messages after 1, 4, 16, and 64 seconds.
Answer: E
Question No: 180 – (Topic 2)
How can the tail drop algorithem support traffic when the queue is filled?
-
It drop older packet with a size of 64 byts or more until queue has more traffic
-
It drop older packet with a size of less than 64 byts until queue has more traffic
-
It drops all new packets until the queue has room for more traffic
-
It drops older TCP packets that are set to be redelivered due to error on the link until the queue has room for more traffic.
Answer: C
100% Ensurepass Free Download!
–400-251 PDF
100% Ensurepass Free Guaranteed!
–400-251 Dumps
EnsurePass | ExamCollection | Testking | |
---|---|---|---|
Lowest Price Guarantee | Yes | No | No |
Up-to-Dated | Yes | No | No |
Real Questions | Yes | No | No |
Explanation | Yes | No | No |
PDF VCE | Yes | No | No |
Free VCE Simulator | Yes | No | No |
Instant Download | Yes | No | No |