Ensurepass.com : Ensure you pass the IT Exams
2018 Aug Cisco Official New Released 400-251
100% Free Download! 100% Pass Guaranteed!

CCIE Security Written Exam (v5.0)

Question No: 61 – (Topic 1)

Refer to the exhibit.

Which two configurations must you perform to enable the device to use this class map?(Choose two)

1. Configure PDLM

2. Configure the ip nbar custom command

3. Configure the ip nbar protocoldiscovery command.

4. Configure the transport hierarchy

5. Configure the DSCP value.

Answer: A,C

Question No: 62 – (Topic 1)

Within Platform as a Service, which two components are managed by the customer?(Choose two)

1. Data.

2. Networking.

3. Middleware.

4. Applications.

5. Operating system

Answer: A,D

Question No: 63 – (Topic 1)

Which three transports have been defined for SNMPv3?(Choose three)

1. SSL

2. TLS

3. GET

4. SSH

5. IPsec secured tunnel

6. DTLS

Answer: A,B,F

Question No: 64 – (Topic 1)

Which two options are benefits of network summarization? (Choose two)

1. It can summarize discontiguous IP addresses.

2. It can easily be added to existing networks.

3. It can increase the convergence of the network.

4. It prevents unnecessary routing updates at the summarization boundary if one of the routes in the summary is unstable

5. It reduces the number of routes.

Answer: D,E

Question No: 65 – (Topic 1)

Which file extensions are supported on the Firesight Management Center 6.1(3.1)file policies that can be analyzed dynamically using the Threat Grid Sandbox integration?

1. MSEXE, MSOLE2, NEW-OFFICE,PDF;

2. DOCX, WAV,XLS,TXT

3. TXT, MSOLE2, WAV, PDF.

4. DOC, MSOLE2, XML, PF.

Answer: A

Question No: 66 – (Topic 1)

From the list below, which one is the major benefit of AMP Threat GRID?

1. AMP Threat Grid collects file information from customer servers and run tests on them to see if they are infected with viruses

2. AMP Threat Grid learns ONLY from data you pass on your network and not from anything else to monitor for suspicious behavior. This makes the system much faster and efficient

3. AMP Threat Grid combines Static, and Dynamic Malware analysis with threat intelligence into one combined solution

4. AMP Threat Grid analyzes suspicious behavior in your network against exactly 400 behavioral indicators

Answer: C

Question No: 67 – (Topic 1)

Refer to the exhibit.

Which meaning of this error message on a Cisco ASA is true?

1. The route map redistribution is configured incorrectly.

2. The default route is undefined.

3. A packet was deniedand dropped by an ACL.

4. The host is connected directly to the firewall.

Answer: B

Question No: 68 – (Topic 1)

Refer to the exhibit.

A user authenticates to the NAS, which communicates to the VACAS server authentication. The TACACS SERVERthen accesses the Active Directory Server through the ASA firewall to validate the user credentials. Which protocol-Port pair must beallowed access through the ASA firewall?

1. SMB over TCP 455.

2. DNS over UDP 53.

3. LDAP over UDP 389.

4. global catalog over UDP 3268.

5. TACACS over TCP 49.

6. DNS over TCP 53.

Answer: C

Question No: 69 – (Topic 1)

Which encryption type is used by ESA for implementing the Email Encryption?

1. PKI.

2. S/MMIE Encryption.

3. Identity Based Encryption(IBE).

4. TLS.

5. SSL Encryption.

Answer: B

Question No: 70 – (Topic 1)

Which two options are benefits the Cisco ASA Identity Firewall?(Choose two)

1. It supports an AD server module to verify identity data.

2. It can operate completely independently of other servers.

3. It decouples security policies from the network topology.

4. It can apply security policies on an individual user or user-group basis

5. It can identify threats quickly based on their URLs.

Answer: A,D

100% Ensurepass Free Download!
–400-251 PDF
100% Ensurepass Free Guaranteed!
–400-251 Dumps

	EnsurePass	ExamCollection	Testking
Lowest Price Guarantee	Yes	No	No
Up-to-Dated	Yes	No	No
Real Questions	Yes	No	No
Explanation	Yes	No	No
PDF VCE	Yes	No	No
Free VCE Simulator	Yes	No	No
Instant Download	Yes	No	No