400-251 Latest Exam (May 2018)

[Free] 2018(June) Dumps4cert Cisco 400-251 Dumps with VCE and PDF Download 251-260

June 24, 2018

Dumps4cert.com : Latest Dumps with PDF and VCE Files
2018 May Cisco Official New Released 400-251
100% Free Download! 100% Pass Guaranteed!

CCIE Security Written Exam (v5.0)

Question No: 251 DRAG DROP – (Topic 2)

Drag and drop each RADIUS packet field on the left onto the matching decription on the right.

Dumps4Cert 2018 PDF and VCE


Dumps4Cert 2018 PDF and VCE

Explanation: A-5,B-2,C-1,D-3,E-4

Question No: 252 – (Topic 2)

Which two statements about header attacks are true?(Choose Two)

  1. An attacker can use IPv6 Next Header attacks to steal user data and launch phishing attacks.

  2. An attacker can use HTTP Header attacks to launch a DoS attack.

  3. An attacker can execute a spoofing attack by populating the RH0 routing header subtype with multiple

    destination addresses.

  4. An attacker can leverage an HTTP response header to write malicious cookies.

  5. An attacker can leverage an HTTP response header to inject malicious code into an application layer.

  6. An attacker can use vulnerabilities in the IPv6 routing header to launch attacks at the application layer.

Answer: B,C

Question No: 253 – (Topic 2)

What technology can you implement on your network to allow IPv4-dependent applications to work with IPv6- capable application?

  1. NAT 6to4

  2. DS-lite

  3. NAT-PT


  5. NAT64

Answer: E

Question No: 254 – (Topic 2)

Refer to the exhibit. Which statement about the router R1 is true?

  1. Its private-config is corrupt.

  2. Its NVRAM contains public and private crypto keys.

  3. Its running configuration is missing.

  4. RMON is configured.

Answer: B

Question No: 255 – (Topic 2)

Dumps4Cert 2018 PDF and VCE

Refer to the exhibit. Which effect of this configuration is true?

  1. Host_1 learns about R2 and only and prefers R2 as its default router

  2. Host_1 selects R2 as its default router and load balances between R2 and R3

  3. Host_1 learns about R2 and R3 only and prefers R3 as its default router

  4. Host_1 learns about R1,R2 and R3 and load balances between them

  5. Host_1 learns about R1, R2 and R3 and prefers R2 as its default router

Answer: E

Explanation: Which two statements about IKEv2 are true? (Choose two)

  1. It uses EAP authentication

  2. It uses X.509 certificates for authentication

  3. The profile is a collection of transforms used to negotiate IKE SAs

  4. It supports DPD and Nat-T by default

  5. The profile contains a repository of symmetric and asymmetric preshared keys

  6. At minimum, a complete proposal requires one encryption algorithm and one integrity algorithm

Answer: E,F

Question No: 256 – (Topic 2)

What feature on Cisco IOS router enables user identification and authorization based on

per-user policies

  1. CBAC

  2. IPsec

  3. Authentication proxy

  4. NetFlow v9

  5. Zone-based firewall

  6. EEM

Answer: C

Question No: 257 DRAG DROP – (Topic 2)

Drag and drop ESP header field on the left to the appropriate field length on the right

Dumps4Cert 2018 PDF and VCE


Dumps4Cert 2018 PDF and VCE

Question No: 258 – (Topic 2)

Which two statements about the MD5 Hash are true? (Choose two.)

  1. Length of the hash value varies with the length of the message that is being hashed.

  2. Every unique message has a unique hash value.

  3. Its mathematically possible to find a pair of message that yield the same hash value.

  4. MD5 always yields a different value for the same message if repeatedly hashed.

  5. The hash value cannot be used to discover the message.

Answer: B,E

Question No: 259 – (Topic 2)

Which two statement about MSDP ate true? (Choose three)

  1. It can connect to PIM-SM and PIM-DM domains

  2. It announces multicast sources from a group

  3. The DR sends source data to the rendezvous point only at the time the source becomes active

  4. It can connect only to PIM-DM domains

  5. It registers multicast sources with the rendezvous point of a domain

  6. It allows domains to discover multicast sources in the same or different domains.

Answer: B,E,F

Question No: 260 – (Topic 2)

Dumps4Cert 2018 PDF and VCE

Refer to the exhibit.While troubleshooting a router issue ,you executed the show ntp associationcommand and it returned this output.Which condition is indicated by the reach value of 357?

  1. The NTP continuously received the previous 8 packets.

  2. The NTP process is waiting to receive its first acknowledgement.

  3. The NTP process failed to receive the most recent packet, but it received the 4 packets before the most recent packet.

  4. The NTP process received only the most recent packet.

Answer: C

100% Dumps4cert Free Download!
Download Free Demo:400-251 Demo PDF
100% Dumps4cert Pass Guaranteed!
400-251 Dumps

Dumps4cert ExamCollection Testking
Lowest Price Guarantee Yes No No
Up-to-Dated Yes No No
Real Questions Yes No No
Explanation Yes No No
Free VCE Simulator Yes No No
Instant Download Yes No No