how many questions of 400-251 practice test?

Q1. According to RFC 2577, Which two options describe drawbacks of the FTP protocol? (Choose two)

A. If access to the FTP server is restricted by network address, the server still is susceptible to spoofing attacks.

B. Servers that apply connection limits to protect against brute force attacks are vulnerable to DoS attacks

C. It is susceptible to man-m-the-middle attacks

D. An attacker can validate user names if the 331 response is in use.

E. It is susceptible to bounce attacks on port 1024

View Answer

Q2. Which two network protocols can operate on the Application Layer?(Choose two)

A. DNS

B. UDP

C. TCP

D. NetBIOS

E. DCCP

F. SMB

View Answer

Q3. What are the three response types for SCEP enrollment requests? (Choose three.)

A. PKCS#7

B. Reject

C. Pending

D. PKCS#10

E. Success

F. Renewal

View Answer

Q4. Refer to the exhibit. 

Which effect of this configuration is true?

A. NUD retransmits 1000 Neighbor solicitation messages every 4 hours and 4 minutes.

B. NUD retransmits Neighbor Solicitation messages after 4, 16, 64 and 256 seconds.

C. NUD retransmits Neighbor Solicitation messages every 4 seconds.

D. NUD retransmits unsolicited Neighbor advertisements messages every 4 hours.

E. NUD retransmits f our Neighbor Solicitation messages every 1000 seconds.

F. NUD retransmits Neighbor Solicitation messages after 1, 4, 16, and 64 seconds.

View Answer

Q5. Which two statement about MLD version 2 on the ASA are true ? (Choose two)

A. It allows the ASA to function as a multicast router.

B. It enables the ASA to discover multicast address listeners on attached and remote links.

C. It discover other multicast address listeners by listening to multicast listener reports.

D. It enables the ASA to discover multicast address listeners to attached links only.

E. It sends multicast listener reports in response to multicast listener quires.

View Answer

Q6. What is the effect of the following command on Cisco IOS router? ip dns spoofing 1.1.1.1

A. The router will respond to the DNS query with its highest loopback address configured

B. The router will respond to the DNS query with 1.1.1.1 if the query id for its own hostname

C. The router will respond to the DNS query with the IP address of its incoming interface for any hostname query

D. The router will respond to the DNS query with the IP address of its incoming interface for

its own hostname

View Answer

Q7. Class -map nbar_rtp

Match protocol rtp payload-type “0,1,4-0x10, 10001b – 10010b,64”

The above NBAR configuration matches RTP traffic with which payload types? 

A)

B)

C)

D)

A. Option A

B. Option B

C. Option C

D. Option D

View Answer

Q8. Refer to the exhibit. Which statement about this debug output is true ?

A. It was generated by a LAN controller when it responded to a join request from an access point

B. It was generated by a LAN controller when it generated a join request to an access point

C. It was generated by an access point when it sent a join reply message to a LAN controller

D. It was generated by an access point when it received a join request message from a LAN controller

View Answer

Q9. Which two statements about the DES algorithm are true? (Choose two)

A. The DES algorithm is based on asymmetric cryptography.

B. The DES algorithm is a stream cipher.

C. The DES algorithm is based on symmetric cryptography.

D. The DES algorithm encrypts a block of 128 bits.

E. The DES algorithm uses a 56-bit key.

View Answer

Q10. When configuration Cisco IOS firewall CBAC operation on Cisco routers, the “inspection rule” can be applied at which two location?(Choose two)

A. at the trusted and untrusted interfaces in the inbound direction.

B. at the trusted interface in the inbound direction.

C. at the trusted and untrusted interfaces in the outbound direction.

D. at the untrusted interface in the inbound direction.

E. at the trusted interface in the outbound direction.

F. at the trusted interface in the outbound direction.

View Answer