Ensurepass.com : Ensure you pass the IT Exams
2018 Aug Cisco Official New Released 400-251
100% Free Download! 100% Pass Guaranteed!

CCIE Security Written Exam (v5.0)

Question No: 91 – (Topic 1)

Refer to the exhibit.

What are two effects of the given configuration?(Choose two)

1. TCP connections will be completed only to TCP ports from 1 to 1024.

2. FTP clients will be able to determine the server’s system type

3. The client must always send the PASV reply.

4. The connection will remain open if the size of the STOP command is greater than a fixed constant.

5. The connection will remain open if the PASV reply command includes 5 commas.

Answer: B,E

Question No: 92 – (Topic 1)

Which two statements about MAB are true?(Choose two)

1. It requires the administratorto create and maintain an accurate database of MAC address.

2. It server at the primary authentication mechanism when deployed in conjunction with 802.1x.

3. It operates at layer 2 and layer 3 of the OSI protocol stack.

4. It can be used to authenticate network devices and users.

5. MAC addresses stored in the MAB database can be spoofed.

6. It is a strong authentication method.

Answer: A,E

Topic 2, Exam Pool B

Question No: 93 – (Topic 2)

Refer to the exhibit. Which statement about the effect of this configuration is true?

1. reply protection is disable

2. It prevent man-in-the-middle attacks

3. The replay window size is set to infinity

4. Out-of-order frames are dropped

Answer: D

Question No: 94 – (Topic 2)

Refer to the exhibit. What is the meaning of the given error massage ?

1. Ike is disable on the remote peer

2. The mirrored crypto ACLs are mismatched

3. The pre-shared keys are mismatched

4. The PFS group are mismatched

Answer: C

Question No: 95 – (Topic 2)

Refer to the exhibit. What type of attack is represented in the given Wireshark packet capture?

1. a SYN flood

2. spoofing

3. a duplicate ACK

4. TCP congestion control

5. a shrew attack

Answer: A

Question No: 96 – (Topic 2)

Which two network protocols can operate on the Application Layer?(Choose two)

1. DNS

2. UDP

3. TCP

4. NetBIOS

5. DCCP

6. SMB

Answer: A,F

Question No: 97 – (Topic 2)

Which option is a benefit of implementing RFC 2827?

1. prevents DoS from legitimate, non-hostile end systems

2. prevents disruption of special services such as Mobile IP

3. defeats DoS attacks which employ IP source address spoofing

4. restricts directed broadcasts at the ingress router

5. allows DHCP or BOOTP packets to reach the relay agents as appropriate

Answer: C

Question No: 98 – (Topic 2)

Which two statement about router Advertisement message are true? (Choose two)

1. Local link prefixes are shared automatically.

2. Each prefix included in the advertisement carries lifetime information f Or that prefix.

3. Massage are sent to the miscast address FF02::1

4. It support a configurable number of retransmission attempts for neighbor solicitation massage.

5. Flag setting are shared in the massage and retransmitted on the link.

6. Router solicitation massage are sent in response to router advertisement massage

Answer: A,F

Question No: 99 – (Topic 2)

What is the maximum pattern length supported by FPM searches within a packet ?

1. 256 bytes B.1500 bytes

2. 512 bytes

3. 128 bytes

Answer: A

Question No: 100 – (Topic 2)

Which two options are differences between automation and orchestration? (Choose two)

1. Automation is to be used to replace human intervention

2. Automation is focused on automating a single or multiple tasks

3. Orchestration is focused on an end-to-end process or workflow

4. Orchestration is focused on multiple technologies to be integrated together

5. Automation is an IT workflow composed of tasks, and Orchestration is a technical task

Answer: B,C

100% Ensurepass Free Download!
–400-251 PDF
100% Ensurepass Free Guaranteed!
–400-251 Dumps

	EnsurePass	ExamCollection	Testking
Lowest Price Guarantee	Yes	No	No
Up-to-Dated	Yes	No	No
Real Questions	Yes	No	No
Explanation	Yes	No	No
PDF VCE	Yes	No	No
Free VCE Simulator	Yes	No	No
Instant Download	Yes	No	No