Testpassport

 sales@testpassport.jp
調べる
かごの中身を見る
チェックアウト

下記はCisco 400-251試験問題集は実際の試験問題のバージョンの一部です。 CCIE Security 400-251問題集 は実際の試験問題バージョンには124問になります。すべての実際の試験問題は、勉強者が最初の試みで成功することを保証できます。400-251問題集の実際の試験問題でCisco試験に不合格になった場合、全額で支払い手数料の払い戻しを受けられます。実際の試験問題をトレーニングしたいでしょうか？ では、トレーニングしましょう！

 400-251フルバージョンを入手

問題#1

Which statement about stealth scan is true?

A. It evades network auditing tools
B. It relies on ICMP "port unreachable" message to determine if the port is open
C. It is used to find the ports that already have an existing vulnerability to exploit
D. It checks the firewall deployment in the path
E. It never opens a full TCP connection
F. It is a directed scan to a known TCP/UDP port

問題#2

Refer to the exhibit.
Router(contig)# cts sxp reconciliation period 180
Which two statements about a device with this configuration are true? (Choose two

A. When a peer re-establishes a previous connection to the device. CTS retains all existing SGT mapping entries for 3 minutes
B. If a peer reconnects to the device within 120 seconds of terminating a CTS-SXP connection, the reconciliation timer starts
C. If a peer re-establishes a connection to the device before the hold-down tier expires, the device retains the SGT mapping entries it learned during the previous connection for an additional 3 minutes
D. It sets the internal hold-down timer of the device to 3 minutes
E. When a peer establishes a new connection to the device, CTS retains all existing SGT mapping entries for 3 minutes
F. If a peer reconnects to the device within 180 seconds of terminating a CTs-SXP connection, the reconciliation timer starts

問題#3

Which statement about Sender Base reputation scoring on an ESA device is true?

A. Application traffic from known bad sites can be throttled or blocked
B. By default, all messages with a score below zero are dropped or throttled
C. Mail with scores in the medium range can be automatically routed for antimalware scanning
D. You can configure a custom score threshold for whitelisting messages
E. A high score indicates that a message is very likely to be spam
F. Sender reputation scores can be assigned to domains, IP addresses, and MAC addresses

問題#4

A university has hired you as a consultant to advise them on the best method to prevent DHCP starvation attacks in the campus. They have already implemented DH CP snooping and port security to control the situation but those do not fully contain the issue.
Which two actions do you suggest to fix this issue? (Choose two.)

A. Use the ip dhcp snooping limit rate command on Trusted and Untrusted interfaces and set the rate to suitable values that are relevant to each interface respectively.
B. Use the ip dhcp snooping verify mac-address command to ensure that the source MAC address in the DHCP request matches the client hardware address (CHADDR) sent to the DHCP server.
C. Use the ip dhcp snooping verify mac-address command to ensure that the source MAC address in the DHCP request matches the client identifier (CLID) field sent to the DHCP server.
D. Use the ip dhcp snooping limit rate command only to ensure that the source MAC address in the DHCP request matches the client identifier (CLID)field sent to the DHCP server.
E. Use the ip dhcp snooping limit rate command on trusted and untrusted interfaces set to the rate same value
F. Use the ip dhcp snooping limit rate command only on Untrusted interfaces and set the rate to suitable values that are relevant to the interface

問題#5

Which statement about SSL policy implementation in a cisco Firepower system is true?

A. Access control policy is optional for the SSL policy implementation
B. If Firepower system cannot decrypt the traffic, it allows the connection
C. Intrusion policy is mandatory to configure the SSL inspection
D. Access control policy is responsible to handle all the encrypted traffic if SSL policy is tried to it
E. Access control policy is invoked first before the SSL policy tied to it
F. If SSL policy is not supported by the system then access control policy handles all the encrypted traffic

試験コード: 400-251問題数量: 124 Q&As更新時間:  2026-10-11

  400-251フルバージョンを入手
 約400-251質問

トップ試験