how many questions of 400-251 exam dumps?

Q1. Which of the following statement is true about the ARP attack?

A. Attackers sends the ARP request with the MAC address and IP address of a legitimate resource in the network.

B. Attackers sends the ARP request with the MAC address and IP address of its own.

C. ARP spoofing does not facilitate man-in-the middle attack of the attackers.

D. Attackers sends the ARP request with its own MAC address and IP address of a legitimate resource in the network.

View Answer

Q2. What are two protocols that HTTP can use to secure sessions? (Choose two)

A. HTTPS

B. AES

C. TLS

D. AH

E. SSL

View Answer

Q3. Refer to the exhibit 

What is the configuration design to prevent?

A. Man in the Middle Attacks

B. Dynamic payload inspection

C. Backdoor control channels for infected hosts

D. DNS Inspection

View Answer

Q4. Which two statements about NAT-PT with IPv6 are true?(choose twp)

A. It can be configured as dynamic, static, or PAT.

B. It provides end-to-end security.

C. It supports IPv6 BVI configurations.

D. It provides support for Cisco Express Forwarding.

E. It provides ALG support for ICMP and DNS.

F. The router can be a single point of failure on the network.

View Answer

Q5. In which class of applications security threads does HTTP header manipulation reside?

A. Session management

B. Parameter manipulation

C. Software tampering

D. Exception managements

View Answer

Q6. Which command can you enter on the Cisco ASA to disable SSH?

A. Crypto key generate ecdsa label

B. Crypto key generate rsa usage-keys noconfirm

C. Crypto keys generate rsa general-keys modulus 768

D. Crypto keys generate ecdsa noconfirm

E. Crypto keys zeroize rsa noconfirm

View Answer

Q7. Which VPN technology is based on GDOI (RFC 3547)?

A. MPLS Layer 3 VPN

B. MPLS Layer 2 VPN

C. GET VPN

D. IPsec VPN

View Answer

Q8. Refer to the exhibit. A signature failed to compile and returned the given error messages. What is a possible reason for the problem?

A. The signature belongs to the IOS IPS Basic category.

B. The signature belongs to the IOS IPS Advanced category.

C. There is insufficient memory to compile the signature.

D. The signature is retired.

E. Additional signature must be complied during the compiling process.

View Answer

Q9. DRAG DROP

Drag and Drop each Cisco Intrusion Prevention System anomaly detection event action on the left onto the matching description on the right.

View Answer

Q10. Which option describes the purpose of the RADIUS VAP-ID attribute?

A. It specifies the ACL ID to be matched against the client

B. It specifies the WLAN ID of the wireless LAN to which the client belongs

C. It sets the minimum bandwidth for the connection

D. It sets the maximum bandwidth for the connection

E. It specifies the priority of the client

F. It identifies the VLAN interface to which the client will be associated

View Answer