Updated Cisco 400-251 pdf

Q1. You have configured an authenticator switch in access mode on a network configured with NEAT.

WhatRADIUS attribute must the ISE sever return to change the switch's port mode to trunk?

A. device-traffic-class=switch

B. device-traffic-class=trunk

C. Framed-protocol=1

D. EAP-message=switch

E. Acct-Authentic=RADIUS

F. Authenticate=Administrative

View Answer

Q2. Which two statement about the multicast addresses query message are true?(choose two)

A. They are solicited when a node initialized the multicast process.

B. They are used to discover the multicast group to which listeners on a link are subscribed

C. They are used to discover whether a specified multicast address has listeners

D. They are send unsolicited when a node initializes the multicast process

E. They are usually sent only by a single router on a link

F. They are sent when a node discover a multicast group

View Answer

Q3. What technology can you implement on your network to allow IPv4-dependent applications to work with IPv6- capable application?

A. NAT 6to4

B. DS-lite

C. NAT-PT

D. ISATAP

E. NAT64

View Answer

Q4. Which command sequence can you enter to enable IP multicast for WCCPv2?

A. Router(config)#ip wccp web-cache service-list Router(config)#interface FastEthernet0/0

Router(config)#ip wccp web-cache group-listen

B. Router(config)#ip wccp web-cache group-list Router(config)#interface FastEthernet0/0 Router(config)#ip wccp web-cache group-listen

C. Router(config)#ip wccp web-cache group-address 224.1.1.100 Router(config)#interface FastEthernet0/0

Router(config)#ip wccp web-cache redirect in

D. Router(config)#ip wccp web-cache group-address 224.1.1.100 Router(config)#interface FastEthernet0/0

Router(config)#ip wccp web-cache group-listen

E. Router(config)#ip wccp web-cache group-address 224.1.1.100 Router(config)#interface FastEthernet0/0

Router(config)#ip wccp web-cache redirect out

View Answer

Q5. Which three statements about the Cisco IPS sensor are true? (Choose three.)

A. You cannot pair a VLAN with itself.

B. For a given sensing interface, an interface used in a VLAN pair can be a member of another inline interface pair.

C. For a given sensing interface, a VLAN can be a member of only one inline VLAN pair, however, a given VLAN can

be a member of an inline VLAN pair on more than one sensing interface.

D. The order in which you specify the VLANs in a inline pair is significant.

E. A sensing interface in inline VLAN pair mode can have from 1 to 255 inline VLAN pairs.

View Answer

Q6. Your 1Pv6 network uses a CA and trust anchor to implement secure network discover. What extension must your CA certificates support?

A. extKeyUsage

B. nameConstrainsts

C. id-pe-ipAddrBlocks

D. Id-pe-autonomousSysldsE. Ia-ad-calssuers

E. keyUsage

View Answer

Q7. Refer to the Exhibit, What is a possible reason for the given error?

A. One or more require application failed to respond.

B. The IPS engine is busy building cache files.

C. The IPS engine I waiting for a CLI session to terminate.

D. The virtual sensor is still initializing.

View Answer

Q8. Which two statements describe the Cisco TrustSec system correctly? (Choose two.)

A. The Cisco TrustSec system is a partner program, where Cisco certifies third-party security products as extensions to the secure infrastructure.

B. The Cisco TrustSec system is an approach to certifying multimedia and collaboration applications as secure.

C. The Cisco TrustSec system is an Advanced Network Access Control System that leverages enforcement intelligence in the network infrastructure.

D. The Cisco TrustSec system tests and certifies all products and product versions that make up the system as working together in a validated manner.

View Answer

Q9. Which three options are methods of load-balancing data in an ASA cluster environment?(Choose three)

A. HSRP

B. spanned EtherChannel

C. distance-vector routing

D. PBR

E. floating static routes

F. ECMP

View Answer

Q10. Which two statement about the IPv6 Hop-by-Hop option extension header (EH. are true?9Choose two)

A. The Hop-by-Hop EH is processed in hardware at the source and the destination devices only.

B. If present, network devices must process the Hop-by-Hop EH first

C. The Hop-by-Hop extension header is processed by the CPU by network devices

D. The Hop-by-Hop EH is processed in hardware by all intermediate network devices

E. The Hop-by-Hop EH is encrypted by the Encapsulating Security Header.

F. If present the Hop-by-Hop EH must follow the Mobility EH.

View Answer