Download CCIE Security Written Exam.actualtests.400-251.2019-01-22.1e.157q.vcex

File Info

Exam	CCIE Security Written Exam v5.1
Number	400-251
File Name	CCIE Security Written Exam.actualtests.400-251.2019-01-22.1e.157q.vcex
Size	3.69 Mb
Posted	January 22, 2019
Downloads	58

How to open VCEX & EXAM Files?

Files with VCEX & EXAM extensions can be opened by ProfExam Simulator.

Download
ProfExam Simulator

Purchase
Coupon: EXAM_HUB

Discount: 20%

Demo Questions

Question 1

View the Exhibit.
Switch-A (config)# cgmp leave-processing
Refer to the exhibit. Which two effects of this configuration are true? (Choose two.)

A: It allows the switch to detect IGMPv2leave group messages.
B: It optimizes the use of network bandwidth on the LAN segment.
C: IGMPv2 leave group messages are stored in the switch CAM table for faster processing.
D: Hosts send leave group messages to the Solicited-Node Address multicast address FF02::1:FF00:0000/104.
E: It improves the processing time of CGMP leave messages.
F: Hosts send leave group messages to the all-router multicast address when they want to stop receiving data for that group.

Correct Answer: AF

Reference: ftp://sunsite.icm.edu.pl/site/cisco-ipmulticast/config-notes/cgmp_an.html

Question 2

Which two statements about the TTL value in an IPv4 header are true? (Choose two.)

A: It is a 4-bit value.
B: Its maximum value is 128.
C: It is a 16-bit value.
D: It can be used for traceroute operations.
E: When it reaches 0, the router sends an ICMP Type 11 message to the originator.

Correct Answer: DE

Question 3

View the Exhibit.

Refer to the exhibit. Which effect of this configuration is true?

A: Any VPN user with a session timeout of 24 hours can access the device.
B: Users attempting to access the console port are authenticated against the TACACS+ server.
C: If TACACS+authentication fails, the ASA uses cisco123 as its default password.
D: The device tries to reach the server every 24 hours and falls back to the LOCAL database if it fails.
E: The servers in the TACACS+ group are reactivated every 1440 seconds.

Correct Answer: B

Question 4

Which of the following is AMP Endpoints office engine for windows?

A: ClamAV
B: ClamAMP
C: TETRA
D: TETRAAMP

Correct Answer: C

Question 5

Which two characteristics of DTLS are true? (Choose two.)

A: It includes a retransmission method because it uses an unreliable datagram transport.
B: It cannot be used if NAT exists along the path.
C: It completes key negotiation and bulk data transfer over a single channel.
D: It includes a congestion control mechanism.
E: It supports long data transfers and connectionless data transfers.
F: It is used mostly by applications that use application layer object-security protocols.

Correct Answer: AD

Question 6

A new computer is not getting its IPv6 address assigned by the router. While running WireShark to try to troubleshoot the problem, you find a lot of data that is not helpful to nail down the problem.
What two filters would you apply to WireShark to filter the data that you are looking for? (Choose two.)

A: icmpv6.type = =136
B: icmpv6.type = =135
C: icmpv5type = =135
D: icmpv6type = =136
E: icmpv6type = =135

Correct Answer: AB

Question 7

Which two options are benefits of network summarization? (Choose two.)

A: It can summarize discontiguous IP addresses.
B: It can easily be added to existing networks.
C: It prevents unnecessary routing updates at the summarization boundary if one of the routes in the summary is unstable.
D: It reduces the number of routes.
E: It can increase the convergence of the network.

Correct Answer: CD

Question 8

Which statement about VRF-aware GDOI group members is true?

A: IPsec is used only to secure data traffic.
B: Registration traffic and rekey traffic must operate on different VRFs.
C: Multiple VRFs are used to separate control traffic and data traffic.
D: The GM cannot route control traffic through the same VRF as data traffic.

Correct Answer: A

Question 9

Which file extensions are supported on the Firesight Management Center 6.1 file policies that can be analyzed dynamically using the Threat Grid Sandbox integration?

A: MSEXE, MSOLE2, NEW-OFFICE, PDF
B: DOCX, WAV, XLS, TXT
C: DOC, MSOLE2, XML, PDF
D: TXT, MSOLE2, WAV, PDF

Correct Answer: A

Question 10

View the Exhibit.