Cisco® 400-251 Exam Practice Questions (P. 3)
- Full Access (952 questions)
- Six months of Premium Access
- Access to one million comments
- Seamless ChatGPT Integration
- Ability to download PDF files
- Anki Flashcard files for revision
- No Captcha & No AdSense
- Advanced Exam Configuration
Question #21
How does a DHCP client request its previously used IP address in a DHCP DISCOVER packet?
- AIt is included in the CIADDR field.
- BIt is included as DHCP Option 50 in the OPTIONS field.
- CIt is included in the YIADDR field.
- DIt is the source IP address of the UDP/53 wrapper packet.
- EThe client cannot request its last IP address; it is assigned automatically by the server.
Correct Answer:
B
B
send
light_mode
delete
Question #22
Which two statements about an authoritative server in a DNS system are true? (Choose two.)
- AIt indicates that it is authoritative for a name by setting the AA bit in responses.
- BIt has a direct connection to one of the root name servers.
- CIt has a ratio of exactly one authoritative name server per domain.
- DIt cannot cache or respond to queries from domains outside its authority.
- EIt has a ratio of at least one authoritative name server per domain.
Correct Answer:
AE
AE
send
light_mode
delete
Question #23
Refer to the exhibit.

Which three statements are true? (Choose three.)

Which three statements are true? (Choose three.)
- ABecause of a "root delay" of 0ms, this router is probably receiving its time directly from a Stratum 0 or 1 GPS reference clock.
- BThis router has correctly synchronized its clock to its NTP master.
- CThe NTP server is running authentication and should be trusted as a valid time source.
- DSpecific local time zones have not been configured on this router.
- EThis router will not act as an NTP server for requests from other devices.
Correct Answer:
BCE
BCE
send
light_mode
delete
Question #24
Which three security features were introduced with the SNMPv3 protocol? (Choose three.)
- AMessage integrity, which ensures that a packet has not been tampered with in-transit
- BDoS prevention, which ensures that the device cannot be impacted by SNMP buffer overflow
- CAuthentication, which ensures that the message is from a valid source
- DAuthorization, which allows access to certain data sections for certain authorized users
- EDigital certificates, which ensure nonrepudiation of authentications
- FEncryption of the packet to prevent it from being seen by an unauthorized source
Correct Answer:
ACF
ACF
send
light_mode
delete
Question #25
Which common Microsoft protocol allows Microsoft machine administration and operates over TCP port 3389?
- Aremote desktop protocol
- Bdesktop mirroring
- Cdesktop shadowing
- DTarantella remote desktop
Correct Answer:
A
A
send
light_mode
delete
Question #26
To prevent a potential attack on a Cisco IOS router with the echo service enabled, what action should you take?
- ADisable the service with the no ip echo command.
- BDisable the service with the no echo command.
- CDisable tcp-small-servers.
- DDisable this service with a global access-list.
Correct Answer:
C
C
send
light_mode
delete
Question #27
Which query type is required for an nslookup on an IPv6 addressed host?
send
light_mode
delete
Question #28
In the context of a botnet, what is true regarding a command and control server?
- AIt can launch an attack using IRC or Twitter.
- BIt is another name for a zombie.
- CIt is used to generate a worm.
- DIt sends the command to the botnets via adware.
Correct Answer:
A
A
send
light_mode
delete
Question #29
Which option is used for anti-replay prevention in a Cisco IOS IPsec implementation?
- Asession token
- Bone-time password
- Ctime stamps
- Dsequence number
- Enonce
Correct Answer:
D
D
send
light_mode
delete
Question #30

What will be the default action?
- AHTTP traffic to the Facebook, Youtube, and Twitter websites will be dropped.
- BHTTP traffic to the Facebook and Youtube websites will be dropped.
- CHTTP traffic to the Youtube and Twitter websites will be dropped.
- DHTTP traffic to the Facebook and Twitter websites will be dropped.
Correct Answer:
D
D
send
light_mode
delete
All Pages