This page was exported from Braindump2go Exam Dumps Free Download [ https://www.pass4surevce.com ] Export date:Thu Mar 28 15:20:38 2024 / +0000 GMT ___________________________________________________ Title: [April-2018-New]Instant Download Braindump2go 400-251 Exam VCE and PDF 359Q[196-206] --------------------------------------------------- 2018 April New Cisco 400-251 Real Exam Dumps with PDF and VCE Just Updated Today! Following are some new 400-251 Real Exam Questions:1.|2018 Latest 400-251 Exam Dumps (PDF & VCE) 359Q Download:https://www.braindump2go.com/400-251.html2.|2018 Latest 400-251 Exam Questions & Answers Download:https://drive.google.com/drive/folders/0B75b5xYLjSSNcGJLWWtfdE96ZUU?usp=sharingQUESTION 196Refer to the exhibit. What type of attack is represented in the given Wireshark packet capture? A. a SYN floodB. spoofingC. a duplicate ACKD. TCP congestion controlE. a shrew attackAnswer: AQUESTION 197What message does the TACACS+ daemon send during the AAA authentication process to request additional authentication information?A. ACCEPTB. REJECTC. CONTINUED. ERRORE. REPLYAnswer: CQUESTION 198Refer to the exhibit.While troubleshooting a router issue, you executed the show ntp association command and it returned this output.Which condition is indicated by the reach value of 357? A. The NTP continuously received the previous 8 packets.B. The NTP process is waiting to receive its first acknowledgement.C. The NTP process failed to receive the most recent packet, but it received the 4 packets before the most recent packet.D. The NTP process received only the most recent packet.Answer: CQUESTION 199Which three IP resources is IANA responsible for? (Choose three.)A. IP address allocationB. detection of spoofed addressC. criminal prosecution of hackersD. autonomous system number allocationE. root zone management in DNSF. BGP protocol vulnerabilitiesAnswer: ADEQUESTION 200Which three attributes may be configured as part of the Common Tasks panel of an authorization profile in the Cisco ISE solution? (Choose three.)A. VLANB. voice VLANC. dACL nameD. voice domain permissionE. SGTAnswer: ACDQUESTION 201Which two statements about DTLS are true?(Choose two)A. It uses two simultaneous IPSec tunnels to carry traffic.B. If DPD is enabled, DTLS can fall back to a TLS connection.C. Because it requires two tunnels, it may experience more latency issues than SSL connections.D. If DTLS is disabled on an interface, then SSL VPN connections must use SSL/TLS tunnels.E. It is disabled by default if you enable SSL VPN on the interface.Answer: BDExplanation:Check the section “Configuring DTLS” in this document:http://www.cisco.com/c/en/us/td/docs/security/asa/asa84/configuration/guide/asa_84_cli_config/vpn_anyconnect.htmlQUESTION 202Refer to the exhibit, which two Statements about the given Configuration are true? (Choose two) A. It is an inbound policy.B. It will allow 209.165.202.129 to connect to 202.165.200.225 on an IMAP port.C. It will allow 209.165.202.129 to connect to 202.165.200.225 on an RDP port.D. It will allow 202.165.200.225 to connect to 209.165.202.129 on an RDP port.E. It will allow 202.165.200.225 to connect to 209.165.202.129 on a VNC port.F. It is an outbound policy.Answer: ACQUESTION 203What command can you use to protect a router from TCP SYN-flooding attacks?A. ip igmp snoopingB. rate-limit input <bps><burst-normal><Burst-max>C. ip tcp intercept list <access-list>D. ip dns spoofing <ip-address>E. police <bps>Answer: CQUESTION 204Refer to the exhibit, what is the effect of the given configuration? A. It will Drop all TTL packet with a value of 14 in the IP header field.B. It will Drop all TTL packet with a TTL value less than 14.C. It will Drop all TTL packet with a TTL value of 15 or more.D. It will Drop all TTL packet with a TTL value of 14 or more.Answer: BQUESTION 205If the ASA interfaces on a device are configured in passive mode, which mode must be configured on the remote device to enable EtherChannel?A. standbyB. activeC. onD. passiveAnswer: BQUESTION 206Which three statements about the SHA-2 algorithm are true? (Choose three)A. It provides a variable-length output using a collision-resistant cryptographic hash.B. It provides a fixed-length output using a collision-resistant cryptographic hash.C. It is used for integrity verification.D. It generates a 160-bit message digest.E. It is the collective term for the SHA-224, SHA-256, SHA-384, and SHA-512 algorithms.F. It generates a 512-bit message digest.Answer: BCE!!!RECOMMEND!!!1.|2018 Latest 400-251 Exam Dumps (PDF & VCE) 359Q Download:https://www.braindump2go.com/400-251.html2.|2018 Latest 400-251 Study Guide Video: YouTube Video: YouTube.com/watch?v=DH_ZfDVMWiU --------------------------------------------------- Images: --------------------------------------------------- --------------------------------------------------- Post date: 2018-04-26 09:10:20 Post date GMT: 2018-04-26 09:10:20 Post modified date: 2018-04-26 09:10:20 Post modified date GMT: 2018-04-26 09:10:20 ____________________________________________________________________________________________ Export of Post and Page as text file has been powered by [ Universal Post Manager ] plugin from www.gconverters.com