Dumps4cert
2018 Mar Cisco Official New Released 400-251
100% Free Download! 100% Pass Guaranteed!
http://www.Dumps4cert.com/400-251.html

CCIE Security Written Exam (v5.0)

Question No: 231 – (Topic 2)

Which statement about Sarbanes-Oxley (SOX) is true?

  1. SOX is an IEFT compliance procedure for computer systems security.

  2. SOX is a US law.

  3. SOX is an IEEE compliance procedure for IT management to produce audit reports.

  4. SOX is a private organization that provides best practices for financial institution computer systems.

  5. Section 404 of SOX is only related to IT compliance.

Answer: B

Question No: 232 – (Topic 2)

Which three statements about Cisco Flexible NetFlow are true? (Choose three.)

  1. The packet information used to create flows is not configurable by the user.

  2. It supports IPv4 and IPv6 packet fields.

  3. It tracks all fields of an IPv4 header as well as sections of the data payload.

  4. It uses two types of flow cache, normal and permanent.

  5. It can be a useful tool in monitoring the network for attacks.

Answer: B,C,E

Question No: 233 – (Topic 2)

Which two options are unicast address types for IPv6 addressing? (Choose two)

  1. Established

  2. Static

  3. Global

  4. Dynamic

  5. Link-local

Answer: C,E

Question No: 234 – (Topic 2)

What are three QoS features supported on the ASA running version 8.x? (Choose Three)

  1. Traffic shaping and standard priority queuing on the same interface.

  2. IPSec-over-TCP priority queuing.

  3. Traffic shaping within the class-default class map only.

  4. Priority queuing.

  5. Traffic shaping within any class map.

  6. Traffic policing.

Answer: C,D,F

Question No: 235 – (Topic 2)

Dumps4Cert 2018 PDF and VCE

Refer to the exhibit. Which configuration option will correctly process network authentication and authorization using both single port ?

A)

Dumps4Cert 2018 PDF and VCE

B)

Dumps4Cert 2018 PDF and VCE

C)

Dumps4Cert 2018 PDF and VCE

D)

Dumps4Cert 2018 PDF and VCE

  1. Option A

  2. Option B

  3. Option C

  4. Option D Answer: B

Question No: 236 – (Topic 2)

Which description of a virtual private cloud is true?

  1. An on-demand configurable pool of shared software applications allocated within a public cloud environment, which provides tenant isolation

  2. An on-demand configurable pool of shared data resources allocated within a private cloud environment,

    which provides assigned DMZ zones

  3. An on-demand configurable pool of shared networking resources allocated within a private cloud environment, which provides tenant isolation

  4. An on-demand configurable pool of shared computing resources allocated within a public cloud environment, which provides tenant isolation

Answer: D

Question No: 237 – (Topic 2)

What feature enables extended secure access from non-secure physical location?

  1. Port security

  2. Strom control

  3. NEAT

  4. CBAC

  5. 802 1x pot-based authentication

Answer: C

Question No: 238 – (Topic 2)

Dumps4Cert 2018 PDF and VCE

Refer the exhibit. Which of the following is the correct output of the above executed command?

A)

Dumps4Cert 2018 PDF and VCE

B)

Dumps4Cert 2018 PDF and VCE

C)

Dumps4Cert 2018 PDF and VCE

D)

Dumps4Cert 2018 PDF and VCE

  1. Option A

  2. Option B

  3. Option C

  4. Option D Answer: C

Question No: 239 – (Topic 2)

Dumps4Cert 2018 PDF and VCE

Refer to the exhibit. You executed the show crypto key mypubkey rsa command to verify that the RSA key is protected and it generated the given output. What command must you have entered to protect the key?

  1. crypto key decrypt rsa name pki.cisco.com passphrase CiscoPKI

  2. crypto key zeroize rsa CiscoPKI

  3. crypto key export ras pki.cisco.com pem url flash: 3des CiscoPKI

  4. crypto key lock rsa name pki.cisco.com passphrase CiscoPKI

  5. crypto key import rsa pki.cisco.com pem url nvram: CiscoPKI

Answer: D

Question No: 240 – (Topic 2)

Which three of these are security properties that TLS v1.2 provides?(Choose three)?

  1. Availability

  2. integrity

  3. non-repudiation

  4. authentication

  5. authorization

  6. confidentiality

Answer: B,D,F

100% Free Download!
–Download Free Demo:400-251 Demo PDF
100% Pass Guaranteed!
–Download 2018 Dumps4cert 400-251 Full Exam PDF and VCE

Dumps4cert ExamCollection Testking
Lowest Price Guarantee Yes No No
Up-to-Dated Yes No No
Real Questions Yes No No
Explanation Yes No No
PDF VCE Yes No No
Free VCE Simulator Yes No No
Instant Download Yes No No

2018 Dumps4cert IT Certification PDF and VCE