Cisco 400-251 Online Practice Questions and Exam Preparation

Cisco 400-251 Online Questions & Answers

• Question 191:

  Which statement a bout the wireless security tech nologies is true?'

  A. WPA2-PSK mode provides better security by having same passphrase across the network
  B. WPA2 provides message integrity using AES
  C. WPA2-PSK mode does not allow a passphras積 to be stored lo~cally on the device
  D. WPA2 is more secure than WPA because it uses TKIP for encryption
  E. WEP is more secure than WPA2 because it uses AES for encryption
  F. WPA2-ENT mode does not require RADIUS for authentication
  B. WPA2 provides message integrity using AES

• Question 192:

  What is the main benefit in placing the IPS behind the perimeter firewall instead of in front of the perimeter firewall?

  A. Increase the number of true positives
  B. Reduce the number of false positives
  C. Increase the number of true negatives
  D. Reduce the number of false negatives
  D. Reduce the number of false negatives

• Question 193:

  Which statement about securing TLS connections on the ESA is true?

  A. The pre-configured demonstration certificate installed on the ESA can establish a secure, verifiable TLS connection
  B. If you apply a certificate to an ESA in cluster mode, it is automatically propagated to the other ESAs in the cluster
  C. Self-signed certificates and CA certificates can provide a verifiable connection. The ESA supports certificates in PKCS#7 and PKCS#12 format
  D. Certificates that are imported to secure RLS connections can also be used by other services on the ESA including LDAP and HTTPS
  E. The ESA encrypts all messages with a certificate before sending them over a TLS connection.
  F. After a certificate is applied to an ESA Cluster using centralized management, new devices added to the cluster automatically adopt the existing certificate.
  A. The pre-configured demonstration certificate installed on the ESA can establish a secure, verifiable TLS connection

• Question 194:

  Which two options are benefits of network summarization? (Choose two)

  A. It prevents unnecessary routing updates at the summarization boundary if one of the routes in the summary is unstable.
  B. It can increase the convergence of the network.
  C. It can summarize discontiguous IP addresses.
  D. It can easily be added to existing networks.
  E. It reduces the number of routes.
  B. It can increase the convergence of the network.
  E. It reduces the number of routes.

• Question 195:

  When an organization is choosing a cloud computing model to adopt, many considerations are studied to determine the most suitable model. To which model is cloud interdependency mainly attributed?

  A. Hybrid cloud
  B. Public cloud
  C. Community cloud
  D. Private cloud
  A. Hybrid cloud

• Question 196:

  What IOS feature can header attacks by using packet-header information to classify traffic?

  A. TTL
  B. CAR
  C. FPM
  D. TOS
  E. LLQ
  C. FPM

• Question 197:

  Which statement is true about Dual-Hub DMVPN implementation where each spoke has two connections, one to each hub via different ISPs.

  A. It uses two tunnel interfaces on each hub to terminate connection from each spoke
  B. It uses point-to-point GRE tunnel
  C. It does not allow multipoint GRE tunnel
  D. It does not allow tunnel protection using IPSec
  E. It allows NHRP authentication
  F. It uses a single tunnel interface on a spoke to connect two different hubs
  E. It allows NHRP authentication

• Question 198:

  DRAG DROP

  Select and Place:

  

  

• Question 199:

  

  Refer to the exhibit. AMP cloud is configured to report AMP Connector scan events from windows machine belong to "Audit" group to FMC but the scanned events are not showing up in FMC, what could be the possible cause?

  A. AMP cloud is pointing to incorrect FMC address
  B. Possible issues with certificate download from AMP cloud for FMC integration
  C. Incorrect group is selected for the events export in AMP cloud for FMC
  D. Event should be viewed as "Malware" event in FMC
  E. DNS address is misconfigured on FMC
  F. FMC is pointing to incorrect AMP cloud address
  D. Event should be viewed as "Malware" event in FMC

• Question 200:

  If an ASA device is configured as a remote access IPsec server with RADIUS authentication and password management enabled, which type of authentication will it use?

  A. RSA
  B. MS-CHAPv2
  C. MS-CHAPv1
  D. NTLM
  E. PAP
  B. MS-CHAPv2