Actual of 400-251 download materials and preparation labs for Cisco certification for IT engineers, Real Success Guaranteed with Updated 400-251 pdf dumps vce Materials. 100% PASS CCIE Security Written Exam exam Today!


2026 New 400-251 Exam Dumps with PDF and VCE Free: https://www.2passeasy.com/dumps/400-251/

Q1. What is an example of a WEP cracking attack ?

A. SQL injection attack

B. Café latte attack

C. directory traversal attack

D. Reflected XSS attack

Answer: B

Q2. DRAG DROP

Drag and drop each syslog facility code on the left onto its description on the right.

Answer:

Explanation:

A:1,B2,C:3,D:4,E:5,F:6

Q3. What are three QoS features supported on the ASA running version 8.x? (Choose Three)

A. Traffic shaping and standard priority queuing on the same interface.

B. IPSec-over-TCP priority queuing.

C. Traffic shaping within the class-default class map only.

D. Priority queuing.

E. Traffic shaping within any class map.

F. Traffic policing.

Answer: C,D,F

Q4. when you configure an ASA with RADIUS authentication and authorization, which attribute is used to differentiate user roles?

A. login-ip-host

B. cisco-priv-level

C. service-type

D. termination-action

E. tunnel-type

Answer: C

Q5. Which object table contains information about the clients know to the server in Cisco NHRP MIB

implementation?

A. NHRP Cache Table

B. NHRP Client Statistics Table

C. NHRP Purge Request Table

D. NHRP Server NHC Table

Answer: D

Q6. According ISO27001 ISMS, which of the following are mandatory documents? (Choose 4)

A. ISMS Policy

B. Corrective Action Procedure

C. IS Procedures

D. Risk Assessment Reports

E. Complete Inventory of all information assets

Answer: A,B,C,D

Q7. Which category to protocol mapping for NBAR is correct?

A. Category:internet Protocol:FTP,HTTP,TFTP

B. )Category:Network management Protocol:ICMP,SNMP,SSH,telent

C. Category:network mail services Protocol:mapi,pop3,smtp

D. Category:Enterprise applications Protocal:citrixICA,PCAnywhere,SAP,IMAP

Answer: A

Q8. Which two statement about the IPv6 Hop-by-Hop option extension header (EH. are true?9Choose two)

A. The Hop-by-Hop EH is processed in hardware at the source and the destination devices only.

B. If present, network devices must process the Hop-by-Hop EH first

C. The Hop-by-Hop extension header is processed by the CPU by network devices

D. The Hop-by-Hop EH is processed in hardware by all intermediate network devices

E. The Hop-by-Hop EH is encrypted by the Encapsulating Security Header.

F. If present the Hop-by-Hop EH must follow the Mobility EH.

Answer: B,C

Q9. What feature enables extended secure access from non-secure physical location?

A. Port security

B. Strom control

C. NEAT

D. CBAC

E. 802 1x pot-based authentication

Answer: C

Q10. Refer to the exhibit. 

What are the two effects of the given configuration? (Choose two)

A. It permits Time Exceeded messages that indicate the fragment assembly time was exceeded

B. It permits Destination Unreachable messages that indicate the host specified in the datagram rejected the message due to filtering

C. It permits Destination Unreachable messages that indicate a problem delivering the datagram to the

destination address specified in the datagram

D. It permits Parameter Problem messages that indicate an unrecognized value in the Next Header Filed

E. It permits Parameter Problem messages that indicate an error in the header

F. It permits Destination Unreachable messages that indicate an invalid port on the host specified in the datagram

Answer: C,F