Cisco 400-251 Online Practice
Questions and Exam Preparation
400-251 Exam Details
Exam Code
:400-251
Exam Name
:CCIE Security Written
Certification
:Cisco Certifications
Vendor
:Cisco
Total Questions
:665 Q&As
Last Updated
:Dec 10, 2021
Cisco 400-251 Online Questions &
Answers
Question 351:
Which two descriptions of the encoding formats supported by RESTONF and NETCONF are true? (Choose two.)
A. NETCONF supports JSON and XML encoding. B. RESTCONF supports XML encoding. C. RESTCONF supports JSON encoding. D. NETCONF supports JSON encoding. E. RESTCONF supports JSON and XML encoding. F. NETCONF supports XML encoding.
E. RESTCONF supports JSON and XML encoding. F. NETCONF supports XML encoding.
Question 352:
Which description of the 3DES encryption algorithm is true?
A. It is a stream cipher algorithm with a key size of 168 bits B. It does decryption in reverse order with different set of keys used during encryption. C. It is a block cipher algorithm with a key size of 56 bits. D. It is an asymmetric algorithm with a key size of 168 bits. E. It is a block cipher algorithm but weaker then DES due to smaller key size. F. It uses a set of three keys for encryption and the same set of three keys forr decryption.
F. It uses a set of three keys for encryption and the same set of three keys forr decryption.
Question 353:
DRAG DROP
Drag and drop the desktop-security terms from the left onto their right definitions on the right?
Select and Place:
Question 354:
DRAG DROP
Select and Place:
Question 355:
Which of the following is part of DevOps virtuous Cycle?
A. Lower Quality B. Increased Latency C. Slower Releases D. Improved Scalability
D. Improved Scalability
Question 356:
Which two statements about a SMURF attack are true? (Choose two)
A. It is used by the attackers to check if destination addresses are alive B. It exhausts the victim machine resources with large number of ICMP Echo Requests from a subnet C. It is adistributed denial-of-service attack D. The at tacker uses a spooed destination address to launch the attack E. To mitigate the attack you must disable IP direct ed broadcast on the router interface F. It sends ICMP Echo Replies to known IP addresses in a subnet G. It sends ICMP Echo Requests to a spoofed source address of a subnet
E. To mitigate the attack you must disable IP direct ed broadcast on the router interface G. It sends ICMP Echo Requests to a spoofed source address of a subnet
Question 357:
Which three ESMTP extensions are supported by the Cisco ASA? (Choose three)
A. NOOP B. PIPELINING C. SAML D. 8BITMIME E. STARTTLS F. ATRN
A. NOOP C. SAML E. STARTTLS
Question 358:
What are the advantages of using LDAP over AD?
A. LDAP allows for granular policy control, whereas AD does not. B. LDAP provides for faster authentication C. LDAP can be configured to use primary and secondary server, whereas AD cannot. D. LDAP does not require ISE to join the AD domain E. The closest LDAP servers are used for Authentication.
C. LDAP can be configured to use primary and secondary server, whereas AD cannot.
Question 359:
Which two parameters must be identical per interface while configuring virtual port channels? (Choose two) A. Network access control
B. IP sourcegard C. Protocol independent multicast D. Bridge Assurance setting E. Maximum transmission unit
D. Bridge Assurance setting E. Maximum transmission unit
Question 360:
Which statement currently describes Botnet attack?
A. It is a form a wireless attack where attacker installs an access point to create backdoor to a network. B. It is a launched by a single machine controlled by Command and Control system. C. It is a form of a fragmentation attack to evade an intrusion prevention security device. D. It is launched by a collection of noncompromised machines controllers by Command and Control system. E. It is a form of a man-in-the-middle attack where the compromised machine is controlled remotely. F. It can be used to steal data.
Nowadays, the certification exams become more and more important and required by more and more
enterprises when applying for a job. But how to prepare for the exam effectively? How to prepare
for the exam in a short time with less efforts? How to get a ideal result and how to find the
most reliable resources? Here on Vcedump.com, you will find all the answers.
Vcedump.com provide not only Cisco exam questions,
answers and explanations but also complete assistance on your exam preparation and certification
application. If you are confused on your 400-251 exam preparations
and Cisco certification application, do not hesitate to visit our
Vcedump.com to find your solutions here.