All About High quality 400-251 exam

Q1. Which two characteristics of DTLS are true? (Choose two)

A. It includes a congestion control mechanism

B. It supports long data transfers and connections data transfers

C. It completes key negotiation and bulk data transfer over a single channel

D. It is used mostly by applications that use application layer object-security protocols

E. It includes a retransmission method because it uses an unreliable datagram transport

F. It cannot be used if NAT exists along the path

View Answer

Q2. Which command sets the Key-length for the IPv6 send protocol?

A. IPv6 nd ns-interval

B. Ipv6 ndra-interval

C. IPv6 nd prefix

D. IPv6 nd inspection

E. IPv6 nd secured

View Answer

Q3. Refer to the Exhibit, What is a possible reason for the given error?

A. One or more require application failed to respond.

B. The IPS engine is busy building cache files.

C. The IPS engine I waiting for a CLI session to terminate.

D. The virtual sensor is still initializing.

View Answer

Q4. Which two statements about the anti-replay feature are true? (Choose two)

A. By default, the sender uses a single 1024-packet sliding window

B. By default, the receiver uses a single 64-packet sliding window

C. The sender assigns two unique sequence numbers to each clear-text packet

D. The sender assigns two unique sequence numbers to each encrypted packet

E. the receiver performs a hash of each packet in the window to detect replays

F. The replay error counter is incremented only when a packet is dropped

View Answer

Q5. Refer to the exhibit. Which statement about the effect of this configuration is true?

A. reply protection is disable

B. It prevent man-in-the-middle attacks

C. The replay window size is set to infinity

D. Out-of-order frames are dropped

View Answer

Q6. Which three fields are part of the AH header? (Choose three)

A. Destination address

B. Protocol ID

C. Packet ICV

D. SPI identifying SA

E. Next header

F. Application port

G. Source address

View Answer

Q7. Which two statement about the multicast addresses query message are true?(choose two)

A. They are solicited when a node initialized the multicast process.

B. They are used to discover the multicast group to which listeners on a link are subscribed

C. They are used to discover whether a specified multicast address has listeners

D. They are send unsolicited when a node initializes the multicast process

E. They are usually sent only by a single router on a link

F. They are sent when a node discover a multicast group

View Answer

Q8. Refer to the Exhibit, Which two Statements about the given Configuration are true? (Choose two)

A. It is an inbound policy.

B. It will allow 209.165.202.129 to connect to 202.165.200.225 on an IMAP port.

C. It will allow 209.165.202.129 to connect to 202.165.200.225 on an RDP port.

D. It will allow 202.165.200.225 to connect to 209.165.202.129 on an RDP port.

E. It will allow 202.165.200.225 to connect to 209.165.202.129 on a VNC port.

F. It is an outbound policy.

View Answer

Q9. Which two statements describe the Cisco TrustSec system correctly? (Choose two.)

A. The Cisco TrustSec system is a partner program, where Cisco certifies third-party security products as extensions to the secure infrastructure.

B. The Cisco TrustSec system is an approach to certifying multimedia and collaboration applications as secure.

C. The Cisco TrustSec system is an Advanced Network Access Control System that leverages enforcement intelligence in the network infrastructure.

D. The Cisco TrustSec system tests and certifies all products and product versions that make up the system as working together in a validated manner.

View Answer

Q10. What port has IANA assigned to the GDOI protocol ?

A. UDP 4500

B. UDP 1812

C. UDP 500

D. UDP 848

View Answer