Cisco 400-251 Online Practice Questions and Exam Preparation

Cisco 400-251 Online Questions & Answers

• Question 151:

  Which authentication does WCCPv2 use to protect messages against interception, inspection, and replay attacks?

  A. MD5
  B. clear text
  C. two factor
  D. Kerberos
  E. EAP
  A. MD5

• Question 152:

  Which statement correctly represents the ACI security principle of Object Model?

  A. It is logical representation of an application and its interdependencies in the network fabric
  B. It is policy placed at the intersection of a source and destination EPGs.
  C. It is defined by the policy applied between EPGs for communication
  D. It consists of one or more tenants having multiple contexts.
  E. These are rules and policies used by an EPG to communicate with other EPGs.
  F. It is collection of endpoints representing an application with in a context
  D. It consists of one or more tenants having multiple contexts.

• Question 153:

  Which three of the following Cisco VPN technologies allow for secure transport and encryption of multicast traffic? (Choose three.)

  A. Static Crypto Map
  B. GETVPN
  C. DMVPN
  D. Dynamic Crypto map
  E. FlexVPN
  B. GETVPN
  C. DMVPN
  E. FlexVPN

• Question 154:

  Which statement is true regarding Private VLAN?

  A. A private VLAN domain can have multiple primary VLAN
  B. Each secondary VLAN in a private VLAN domain needs to have a separate associated primary VLAN
  C. Each port in a private VLAN domain is a member of all the secondary VLANs in that domain
  D. A subdomain in a primary VLAN domain consists of a primary and secondary VLAN pair
  E. In a private VLAN domain a secondary VLAN port needs to be an isolated port for it to be able to communicate with a layer-3 device
  F. In a private VLAN domain a secondary VLAN can have only one promiscuous port
  F. In a private VLAN domain a secondary VLAN can have only one promiscuous port

• Question 155:

  What are two features that helps to mitigate man-in-the-middle attacks? (Choose two)

  A. DHCP snooping
  B. ARP spoofing
  C. destination MAC ACLs
  D. dynamic ARP inspection
  E. ARP sniffing on specific ports
  A. DHCP snooping
  D. dynamic ARP inspection

• Question 156:

  If a packet capture is taken between ISE and an endpoint to capture an EAP-TLS session, you will be able to see:

  A. Certificate and associated private keys from ISE only
  B. Certificates from ISE and the endpoint
  C. Certificate and associated private keys from endpoint only
  D. Certificates from ISE only
  D. Certificates from ISE only

• Question 157:

  Which Statement is true regarding Private VLAN?

  A. A private VLAN domain can have multiple primary VLAN
  B. Each secondary VLAN in a private VLAN domain needs to have a separate associated primary VLAN
  C. Each port in a private VLAN domain is a member of all the secondary VLANs in that domain
  D. A subdomain in a primary VLAN domain consists of a primary and secondary VLAN pair
  E. In a private VLAN domain a secondary VLAN port needs to be an isolated port for it to be able to communicate with a layer-3 device
  F. In a private VLAN domain a secondary VlAN can have only one promiscuous port
  D. A subdomain in a primary VLAN domain consists of a primary and secondary VLAN pair

• Question 158:

  Refer to the exhibit. Which effect of this configuration is true?

  class Partner-Class limit-resource routers 50 limit-resource ASDM 4 limit-resource VPN other 400 limit-resource xlates 18000

  A. It allows each context to user all available resources.
  B. It oversubscribes VPN sessions for the given class.
  C. It creates a default class.
  D. It creates a resource class.
  D. It creates a resource class.

• Question 159:

  What is an appropriate way to prepare ISE for a staged deployment?

  A. Closed Mode > low-impact mode
  B. low-impact mode > monitor mode > Closed Mode
  C. Monitor mode > low-impact mode > Closed Mode
  D. Open mode > Closed mode > low-impact mode
  C. Monitor mode > low-impact mode > Closed Mode

• Question 160:

  Which three messages are part of the SSL protocol? (Choose three)

  A. Change CipherSpec
  B. Alert
  C. Record
  D. Message Authenication
  E. CipherSpec
  F. Handshake
  A. Change CipherSpec
  B. Alert
  F. Handshake