Nest 0 Cart
Nest Account
Popular Exams
All Categories...
Nest
Nest 0
Contact
Log In / Sign Up
Copyright 2024 © store. All rights reserved.
Home Cisco® 400-251

Cisco® 400-251 Exam Practice Questions (P. 2)

  • Full Access (952 questions)
  • Six months of Premium Access
  • Access to one million comments
  • Seamless ChatGPT Integration
  • Ability to download PDF files
  • Anki Flashcard files for revision
  • No Captcha & No AdSense
  • Advanced Exam Configuration
Get Contributor Access
Question #11
Which protocol does 802.1X use between the supplicant and the authenticator to authenticate users who wish to access the network?
  1. A
    SNMP
  2. B
    TACACS+
  3. C
    RADIUS
  4. D
    EAP over LAN
  5. E
    PPPoE

Correct Answer:
D

Question #12
Which two statements are correct regarding the AES encryption algorithm? (Choose two.)
  1. A
    It is a FIPS-approved symmetric block cipher.
  2. B
    It supports a block size of 128, 192, or 256 bits.
  3. C
    It supports a variable length block size from 16 to 448 bits.
  4. D
    It supports a cipher key size of 128, 192, or 256 bits.
  5. E
    The AES encryption algorithm is based on the presumed difficulty of factoring large integers.

Correct Answer:
AD

Question #13
What are two benefits of using IKEv2 instead of IKEv1 when deploying remote-access IPsec VPNs? (Choose two.)
  1. A
    IKEv2 supports EAP authentication methods as part of the protocol.
  2. B
    IKEv2 inherently supports NAT traversal.
  3. C
    IKEv2 messages use random message IDs.
  4. D
    The IKEv2 SA plus the IPsec SA can be established in six messages instead of nine messages.
  5. E
    All IKEv2 messages are encryption-protected.

Correct Answer:
AB

Question #14
DNSSEC was designed to overcome which security limitation of DNS?
  1. A
    DNS man-in-the-middle attacks
  2. B
    DNS flood attacks
  3. C
    DNS fragmentation attacks
  4. D
    DNS hash attacks
  5. E
    DNS replay attacks
  6. F
    DNS violation attacks

Correct Answer:
A

Question #15
Which three statements are true about MACsec? (Choose three.)
  1. A
    It supports GCM modes of AES and 3DES.
  2. B
    It is defined under IEEE 802.1AE.
  3. C
    It provides hop-by-hop encryption at Layer 2.
  4. D
    MACsec expects a strict order of frames to prevent anti-replay.
  5. E
    MKA is used for session and encryption key management.
  6. F
    It uses EAP PACs to distribute encryption keys.

Correct Answer:
BCE

Question #16
Which SSL protocol takes an application message to be transmitted, fragments the data into manageable blocks, optionally compresses the data, applies a MAC, encrypts, adds a header, and transmits the resulting unit in a TCP segment?
  1. A
    SSL Handshake Protocol
  2. B
    SSL Alert Protocol
  3. C
    SSL Record Protocol
  4. D
    SSL Change CipherSpec Protocol

Correct Answer:
C

Question #17
IPsec SAs can be applied as a security mechanism for which three options? (Choose three.)
  1. A
    Send
  2. B
    Mobile IPv6
  3. C
    site-to-site virtual interfaces
  4. D
    OSPFv3
  5. E
    CAPWAP
  6. F
    LWAPP

Correct Answer:
BCD

Question #18
Which four options are valid EAP mechanisms to be used with WPA2? (Choose four.)
  1. A
    PEAP
  2. B
    EAP-TLS
  3. C
    EAP-FAST
  4. D
    EAP-TTLS
  5. E
    EAPOL
  6. F
    EAP-RADIUS
  7. G
    EAP-MD5

Correct Answer:
ABCD

Question #19
Which three statements are true about the SSH protocol? (Choose three.)
  1. A
    SSH protocol runs over TCP port 23.
  2. B
    SSH protocol provides for secure remote login and other secure network services over an insecure network.
  3. C
    Telnet is more secure than SSH for remote terminal access.
  4. D
    SSH protocol runs over UDP port 22.
  5. E
    SSH transport protocol provides for authentication, key exchange, confidentiality, and integrity.
  6. F
    SSH authentication protocol supports public key, password, host based, or none as authentication methods.

Correct Answer:
BEF

Question #20
Which two statements are true when comparing ESMTP and SMTP? (Choose two.)
  1. A
    Only SMTP inspection is provided on the Cisco ASA firewall.
  2. B
    A mail sender identifies itself as only able to support SMTP by issuing an EHLO command to the mail server.
  3. C
    ESMTP mail servers will respond to an EHLO with a list of the additional extensions they support.
  4. D
    SMTP commands must be in upper case, whereas ESMTP can be either lower or upper case.
  5. E
    ESMTP servers can identify the maximum email size they can receive by using the SIZE command.

Correct Answer:
CE

Previous Questions Next Questions

All Pages