This page was exported from Easily Pass By Training Lead2pass Latest Dumps [ https://www.freebraindump.com ]

Export date:Mon Mar 3 23:46:58 2025 / +0000 GMT

___________________________________________________


Title: [Lead2pass New] 2017 New Released Cisco 400-251 Exam Dumps Free Download In Lead2pass (326-350)

---------------------------------------------------


2017 October Cisco Official New Released 400-251 Dumps in Lead2pass.com!  100% Free Download! 100% Pass Guaranteed!  We offer the most current and best training materials of the 400-251 certification Q&amp;A , Practice Software, Study Packs, Preparation Labs and Audio Training you are looking for. Our online certification training offers you quick and cost-efficient way to train and become a certified professional in IT industry.  Following questions and answers are all new published by Cisco Official Exam Center: https://www.lead2pass.com/400-251.html  QUESTION 326What is the first step in performing a risk assessment? A.&nbsp;&nbsp;&nbsp; Identifying critical services and network vulnerabilrties and determining the potential impact of their compromise or failure.B.&nbsp;&nbsp;&nbsp; Investigating reports of data theft or security breaches and assigning responsibility.C.&nbsp;&nbsp;&nbsp; Terminating any employee believed to be responsible for compromising security.D.&nbsp;&nbsp;&nbsp; Evaluating the effectiveness and appropriateness of the organization's current risk-managemept activities.E.&nbsp;&nbsp;&nbsp;&nbsp; Establishing a security team to perform forensic examinations of previous known attacks.Answer: A QUESTION 327What command can you use to display the number of malformed messages received by a DHCP server? A.&nbsp;&nbsp;&nbsp; show ip dhcp relay information trusted-sourcesB.&nbsp;&nbsp;&nbsp; show ip dhcp server statisticsC.&nbsp;&nbsp;&nbsp; show ip dhcp conflictD.&nbsp;&nbsp;&nbsp; show ip dhcp bindingE.&nbsp;&nbsp;&nbsp;&nbsp; show ip dhcp database Answer: B QUESTION 328Which of the following are-two valid TLS message content types? (Choose two.) A.&nbsp;&nbsp;&nbsp; AlertB.&nbsp;&nbsp;&nbsp; Application dataC.&nbsp;&nbsp;&nbsp; ProxyD.&nbsp;&nbsp;&nbsp; IdentityE.&nbsp;&nbsp;&nbsp;&nbsp; Notification DynamiDF.&nbsp;&nbsp;&nbsp;&nbsp; Success Answer: AB QUESTION 329What are the two most common methods that security auditors use to assess an organization's security processes? (Choose two) A.&nbsp;&nbsp;&nbsp; social engineering attemptsB.&nbsp;&nbsp;&nbsp; interviewsC.&nbsp;&nbsp;&nbsp; policy assessmentD.&nbsp;&nbsp;&nbsp; penetration testingE.&nbsp;&nbsp;&nbsp;&nbsp; document reviewF.&nbsp;&nbsp;&nbsp;&nbsp; Physical observation Answer: BFExplanation:Check out the section called “Auditing security practices”, namely the block for “Security process review”:http://www.ciscopress.com/articles/article.asp?p=1606900&amp;amp;seqNum=2 QUESTION 330All of these are avialable from Cisco IPS Device Manager (Cisco IDM) except which one? A.&nbsp;&nbsp;&nbsp; Top SignaturesB.&nbsp;&nbsp;&nbsp; Sensor InformationC.&nbsp;&nbsp;&nbsp; Interface StatusD.&nbsp;&nbsp;&nbsp; Global Correlation ReportsE.&nbsp;&nbsp;&nbsp; CPU. Memory and Load Answer: A QUESTION 331What SNMPv3 command disable descriptive error message? A.&nbsp;&nbsp;&nbsp; snmp-server trap link switchoverB.&nbsp;&nbsp;&nbsp; snmp-server ifindex persistC.&nbsp;&nbsp;&nbsp; snmp-server informD.&nbsp;&nbsp;&nbsp; snmp-server usm cisco Answer: D QUESTION 332Refer to the exhibit. Which line in the given configuration contains a locally significant value?  &nbsp; A.&nbsp;&nbsp;&nbsp; tunnel key 123B.&nbsp;&nbsp;&nbsp; ip nhrp authentication ciscoC.&nbsp;&nbsp;&nbsp; ip nhrp map multicast 150.1.1.1D.&nbsp;&nbsp;&nbsp; ip nhrp holdtime 60E.&nbsp;&nbsp;&nbsp; ip nhrp network-id 123 Answer: E QUESTION 333What are the three flag bits in an IPv4 header? (Choose three.) A.&nbsp;&nbsp;&nbsp; TTLB.&nbsp;&nbsp;&nbsp; UnusedC.&nbsp;&nbsp;&nbsp; Record RouteD.&nbsp;&nbsp;&nbsp; DFE.&nbsp;&nbsp;&nbsp; MFF.&nbsp;&nbsp;&nbsp; Timestamp Answer: BDE QUESTION 334Which two parameters can the HostScan feature scan before users log m? (Choose two) A.&nbsp;&nbsp;&nbsp; whether specific files are presentB.&nbsp;&nbsp;&nbsp; whether a proxy service is configured on a Linux hostC.&nbsp;&nbsp;&nbsp; whether specific IPv4 and IPv6 addresses are assignedD.&nbsp;&nbsp;&nbsp; whether specific certificate authorities are configuredE.&nbsp;&nbsp;&nbsp; whether a specific keychain entry exists on an OS X host Answer: AC QUESTION 335Refer to the exhibit. You have configured an NDAC seed switch as shown, but the switch is failing to allow other switches to securely join the domain What command must you add to the seed switch's configuration to enable secure RADIUS communication?  &nbsp; A.&nbsp;&nbsp;&nbsp; Seed-Switch(config)#radius.server host 10.1.1.2 auth-port 1812 acct-port 1813 test username ndac-test pac key Cisco123B.&nbsp;&nbsp;&nbsp; Seed-Switch(config)#radius-server vsa send accountingC.&nbsp;&nbsp;&nbsp; Seed-Switch(config)#aaa preauthD.&nbsp;&nbsp;&nbsp; Seed-Switch(config)#no dot1x system-auth-controlE.&nbsp;&nbsp;&nbsp; Seed-Switch(config)#radius-server host non-standardF.&nbsp;&nbsp;&nbsp; Seed-Switch(config)#aaa authentication dot1x default group local Answer: A QUESTION 336Refer to the exhibit. What is the effect of the given command? &nbsp; A.&nbsp;&nbsp;&nbsp; It enables CoPP on the FastEthernet 0/0 interface for SSH and SNMP management traffic.B.&nbsp;&nbsp;&nbsp; It enables MPP on the FastEthernet 0/0 interface for SSH and SNMP management traffic and CoPP for all other protocols.C.&nbsp;&nbsp;&nbsp; It enables MPP on the FastEthernet 0/0 interface, allowing only SSH and SNMP management traffic.D.&nbsp;&nbsp;&nbsp; It enables QoS policing on the control plane of the FasEthernet 0/0 interface.E.&nbsp;&nbsp;&nbsp; It enables MPP on the FastEthernet 0/0 interface by enforcing rate-limiting for SSH and SNMP management traffic. Answer: C QUESTION 337Which two statements about SCEP are true? (Choose two) A.&nbsp;&nbsp;&nbsp; CA servers must support GetCACaps response messages in order to implement extended functionalityB.&nbsp;&nbsp;&nbsp; The GetCRL exchange is signed and encrypted only in the response direction.C.&nbsp;&nbsp;&nbsp; It is vulnerable to downgrade attacks on its cryptographic capabilitiesD.&nbsp;&nbsp;&nbsp; The GetCert exchange is signed and encrypted only in the response direction.E.&nbsp;&nbsp;&nbsp; The GetCACaps response message supports DES encryption and the SHA-128 hashing algorithm. Answer: AC QUESTION 338Which two events can cause a failover event on an active/standby setup? (Choose two.) A.&nbsp;&nbsp;&nbsp; The active unit experiences interface failure above the threshold.B.&nbsp;&nbsp;&nbsp; The unit that was previously active recovers.C.&nbsp;&nbsp;&nbsp; The stateful failover link fails.D.&nbsp;&nbsp;&nbsp; The failover link fails.E.&nbsp;&nbsp;&nbsp; The active unit fails Answer: AE QUESTION 339Which two statements about the MACsec security protocol are true? (choose two.) A.&nbsp;&nbsp;&nbsp; Stations broadcast an MKA heartbeat that contains the key server priorityB.&nbsp;&nbsp;&nbsp; The SAK is secured by 128 bit AES-GCM by defaultC.&nbsp;&nbsp;&nbsp; When switch-to-switch link security is configured in manual mode, the SAP operation mode must be set to GCMD.&nbsp;&nbsp;&nbsp; MACsec is not supported in MDA mode.E.&nbsp;&nbsp;&nbsp; MKA heartbeats are sent at a default interval of 3 seconds. Answer: AB QUESTION 340Which two options are benefits of network summarization? (Choose two.) A.&nbsp;&nbsp;&nbsp; It can summarize discontiguous IP addresses.B.&nbsp;&nbsp;&nbsp; It can easily be added to existing networksC.&nbsp;&nbsp;&nbsp; it can increase the convergence of the networkD.&nbsp;&nbsp;&nbsp; It reduces the number of routesE.&nbsp;&nbsp;&nbsp; It prevents unnecessary routing updates at the summarization boundary if one of the routes in the summary is unstable. Answer: DE QUESTION 341Refer to the exhibit. Which meaning of this error message on a Cisco ASA is true? &nbsp; A.&nbsp;&nbsp;&nbsp; The route map redistribution is configured incorrectly.B.&nbsp;&nbsp;&nbsp; The default route is undefined.C.&nbsp;&nbsp;&nbsp; A packet was denied and dropped by an ACL.D.&nbsp;&nbsp;&nbsp; The host is connected directly to the firewall Answer: B QUESTION 342Which two statements about uRPF are true? (Choose two.) A.&nbsp;&nbsp;&nbsp; The administrator can configure the allow-default command to force the routing table to use only the default routeB.&nbsp;&nbsp;&nbsp; It is not supported on the Cisco ASA security appliance.C.&nbsp;&nbsp;&nbsp; The administrator can configure the ip verify unicast source reachable-via any command to enable the RPF check to work routing groups.D.&nbsp;&nbsp;&nbsp; The administrator can use the show cef interface command to determine whether uRPF is enabledE.&nbsp;&nbsp;&nbsp; In strict mode, only one routing path can be available to reach network devices on a subnet Answer: AD QUESTION 343Which type of header attack is detected by Cisco ASA basic threat detection? A.&nbsp;&nbsp;&nbsp; connection limit exceededB.&nbsp;&nbsp;&nbsp; denial by access listC.&nbsp;&nbsp;&nbsp; failed application inspectionD.&nbsp;&nbsp;&nbsp; bad packet format Answer: D QUESTION 344Refer to the exhibit. A user authenticates to the NAS, which communicates to the VACACS+ server authentication. The TACACS+ SERVER Then accesses the Active Directory Server through the ASA firewall to validate the user credentials.Which protocol-port pair must be allowed access through the ASA firewall? &nbsp; A.&nbsp;&nbsp;&nbsp; SMB over TCP 455B.&nbsp;&nbsp;&nbsp; DNS over UDP 53C.&nbsp;&nbsp;&nbsp; LDAP over UDP 389D.&nbsp;&nbsp;&nbsp; global catalog over UDP 3268E.&nbsp;&nbsp;&nbsp; TACACS+ over TCP 49F.&nbsp;&nbsp;&nbsp; DNS over TCP 53 Answer: C QUESTION 345Which WEP configuration can be exploited by a weak IV attack? A.&nbsp;&nbsp;&nbsp; When the static WEP password has been stored without encryptionB.&nbsp;&nbsp;&nbsp; When a per-packet WEP key is in useC.&nbsp;&nbsp;&nbsp; When a 64-bit key is in useD.&nbsp;&nbsp;&nbsp; When the static WEP password has been given awayE.&nbsp;&nbsp;&nbsp; When a 40-bit key is in useF.&nbsp;&nbsp;&nbsp; When the same WEP key is used to create every pack Answer: F QUESTION 346Which two statements about Botnet Traffic Filter snooping are true? (Choose two) A.&nbsp;&nbsp;&nbsp; It requires DNS packet inspection to be enabled to filter domain names in the dynamic database.B.&nbsp;&nbsp;&nbsp; It requires the Cisco ASA DNS server to perform DNS lookups.C.&nbsp;&nbsp;&nbsp; It can inspect both IPv4 and IPv6 traffic.D.&nbsp;&nbsp;&nbsp; It can log and block suspicious connections from previously unknown bad domains and IP addressesE.&nbsp;&nbsp;&nbsp; It checks inbound traffic onlyF.&nbsp;&nbsp;&nbsp; It checks inbound and outbound traffic. Answer: AF QUESTION 347Which three statements about SXP are true? (Choose three ) A.&nbsp;&nbsp;&nbsp; It resides in the control plane, where connections can be initiated from a listenerB.&nbsp;&nbsp;&nbsp; Packets can be tagged with SGTs only with hardware supportC.&nbsp;&nbsp;&nbsp; Each VRF supports only one CTS-SXP connectionD.&nbsp;&nbsp;&nbsp; To enable an access device to use IP device tracking to learn source device IP addresses.DHCP snooping must be configured.E.&nbsp;&nbsp;&nbsp; The SGA ZBPF uses the SGT to apply forwarding decisionsF.&nbsp;&nbsp;&nbsp; Separate VRFs require different CTS-SXP peers, but they can use the same source IP addresses. Answer: BCE QUESTION 348Which file extensions are supported on the Firesight Management Center 3.1 file policies that can be analyzed dynamically using the Threat Grid Sandbox integration? A.&nbsp;&nbsp;&nbsp; MSEXE , MSOLE2 , NEW-OFFICE ,PDFB.&nbsp;&nbsp;&nbsp; DOCX , WAV , XLS , TXTC.&nbsp;&nbsp;&nbsp; TXT , MSOLE2 , WAV, PDFD.&nbsp;&nbsp;&nbsp; DOC, MSOLE2, XML, PDF Answer: A QUESTION 349Refer to the exhibit You applied this VPN cluster configuration to a Cisco ASA and the cluster failed to form How do you edit the configuration to correct the problem? &nbsp; A.&nbsp;&nbsp;&nbsp; Define the maximum allowable number of VPN connections.B.&nbsp;&nbsp;&nbsp; Define the master/slave relationship.C.&nbsp;&nbsp;&nbsp; Configure the cluster IP address.D.&nbsp;&nbsp;&nbsp; Enable load balancing. Answer: C QUESTION 350Which effect of the crypto pki authenticate command is true? A.&nbsp;&nbsp;&nbsp; It sets the certificate enrollment method.B.&nbsp;&nbsp;&nbsp; It retrieves and authenticates a CA certificate.C.&nbsp;&nbsp;&nbsp; It configures a CA trust point.D.&nbsp;&nbsp;&nbsp; It displays the current CA certificate. Answer: B The strength of our 400-251 dumps is the constant update that we perform to keep abreast with the market trends and changes. Our 400-251 exam question is not only the best option for certification but also enhances your skill to an advance level.  400-251 new questions on Google Drive: https://drive.google.com/open?id=0B3Syig5i8gpDU1JrNmttR1dfUm8  2017 Cisco 400-251 exam dumps (All 636 Q&amp;As) from Lead2pass:  https://www.lead2pass.com/400-251.html [100% Exam Pass Guaranteed]

---------------------------------------------------


Images: 

---------------------------------------------------




---------------------------------------------------


Post date: 2017-10-25 03:50:42

Post date GMT: 2017-10-25 03:50:42

Post modified date: 2017-10-25 03:50:42

Post modified date GMT: 2017-10-25 03:50:42



____________________________________________________________________________________________


Export of Post and Page as text file has been powered by [ Universal Post Manager ] plugin from www.gconverters.com