Cisco 400-251 Online Practice Questions and Exam Preparation

Cisco 400-251 Online Questions & Answers

• Question 171:

  Which protocol does ISE use to secure connection through the Cisco IronPort Tunnel Infrastructure?

  A. SSH
  B. IKEv1
  C. IKEv2
  D. SNMP
  E. TLS
  A. SSH

• Question 172:

  In which type of multicast does the Cisco ASA forward IGMP messages to the upstream router?

  A. clustering
  B. PIM multicast routing
  C. stub multicast routing
  D. multicast group concept
  C. stub multicast routing

• Question 173:

  What are two types of attcks against wireless networks that can be prevented by a WLC?(Choose two)

  A. Layer 3 flooding attacks
  B. DHCP rogue server attacks
  C. IP spoofing attacks
  D. Inverse ARP attacks on specific ports
  E. ARP sniffing attacks on specific ports
  B. DHCP rogue server attacks
  C. IP spoofing attacks

• Question 174:

  

  Refer to the exhibit R3 is the Key Server in GETVPN VR-Aware implementation. The Group Members for the site_a registers with key server via interface address 10.1.20.3/24 in the management VRF "mgmt.". The GROUP ID for the site_a is 100 to retrieve group policy and keys from the key server.

  The traffic to be encrypted by the site_a Group Members is between 192.168.4.0/24 and 192.168.5.0/24. Preshared-key used by the Group members to authenticate with Key servers is "cisco". It has been reported that group Members are unable to perform encryption for the traffic defined in the group policy of site_a. what could be the issue?

  A. Incorrect encryption traffic defined in the group policy
  B. Incorrect mode configuration in the transform set
  C. Incorrect password in the keyring configuration
  D. Incorrect security-association time in the IPsec profile
  E. Incorrect encryption in ISAKMP policy
  F. The GDOI group has incorrect local server address
  G. The registration interface in not part of management VRF "mgmt"
  A. Incorrect encryption traffic defined in the group policy
  G. The registration interface in not part of management VRF "mgmt"

• Question 175:

  For your enterprise ISE deployment, you want to use certificate-based authentication for all your Windows machines. You have already pushed the machine and user certificates out to all the machines using GPO. by default, certificate-based authentication does not check the certificate against Active Directory, or requires credentials from the user. This essentially means that no groups are returned as part of the authentication request. In which way can the user be authorized based on Active Directory group membership?

  A. Configure the Windows supplicant to used saved credentials as well as certificate-based authentication
  B. Enable Change of Authorization on the deployment to perform double authentication
  C. Use ISE as the Certificate Authority, which will then allow for automatic group retrieval from Active Directory to perform the required authorization
  D. The certificate must be configured with the appropriate attributes that contain appropriate group information, which can be used in Authorization policies
  E. Configure Network Access Device to bypass certificate-based authentication and push configured user credentials as a proxy to ISE
  F. Use EAP authorization to retrieve group information from Active Directory
  E. Configure Network Access Device to bypass certificate-based authentication and push configured user credentials as a proxy to ISE

• Question 176:

  Which OpenStack project has orchestration capabilities?

  A. Cinder
  B. Horizon
  C. Sahara
  D. Heat
  D. Heat

• Question 177:

  DRAG DROP

  Drag and drop the description on the left on to the associated item on the right.

  Select and Place:

  

  

• Question 178:

  Which Cisco ISE profiler service probe can collect information about Cisco Discovery Protocol?

  A. DHCP SPAN
  B. RADIUS
  C. SNMP Query
  D. NetFlow
  E. HTTP
  F. DHCP
  C. SNMP Query

• Question 179:

  What are the two different modes in which private AMP cloud can be deployed?(Choose two)

  A. Air Gap Mode
  B. External Mode
  C. Internal Mode
  D. Public Mode
  E. Cloud Mode
  F. Cloud Proxy Mode
  A. Air Gap Mode
  F. Cloud Proxy Mode

• Question 180:

  Drag the components of WIPS architecture on the left to their respective functionalities on the right

  Select and Place: