Cisco 400-251 - CCIE Security Written Exam Exam
Page: 3 / 62
Total 307 questions
Question #11 (Topic: Topic 1)
Which three statements about Cisco AnyConnect SSL VPN with the ASA are true? (Choose three.)
A. Real-time application performance improves if DTLS is implemented.
B. DTLS can fall back to TLS without enabling dead peer detection.
C. The ASA will verify the remote HTTPS certificate.
D. By default, the ASA uses the Cisco AnyConnect Essentials license.
E. By default, the VPN connection connects with DTLS.
F. Cisco AnyConnect connection use IKEv2 by default when it is configured as the primary protocol on the client.
Answer: ABE
Question #12 (Topic: Topic 1)
Which two options are benefits of global ACLs? (Choose two.)
A. The only operate on logical interfaces.
B. They are more efficient because they are processed before interface access rules.
C. They can be applied to multiple interfaces.
D. They are flexible because they match source and destination IP addresses for packets that arrive on any interface.
E. They save memory because they work without being replicated on each interface.
Answer: DE
Question #13 (Topic: Topic 1)
Which three statements about 802.1x multiauthentication mode are true? (Choose three.)
A. It can be deployed in conjunction with MDA functionality on voice VLANs.
B. It requires each connected client to authenticate individually.
C. Each multiauthentication port can support only one voice VLAN.
D. It is recommended for auth-fail VLANs.
E. On non-802.1x devices, it can support only one authentication method on a single port.
F. It is recommended for guest VLANs.
Answer: ABC
Question #14 (Topic: Topic 1)
View the Exhibit.
[Cisco-400-251-1.0/xmlfile-10_1.png]
Refer to the exhibit. Which three additional configuration elements must you apply to complete a functional FlexVPN deployment? (Choose three.)
[Cisco-400-251-1.0/xmlfile-11_1.png]
A.
[Cisco-400-251-1.0/xmlfile-11_2.png]
B.
[Cisco-400-251-1.0/xmlfile-11_3.png]
C.
[Cisco-400-251-1.0/xmlfile-11_4.png]
D.
[Cisco-400-251-1.0/xmlfile-11_5.png]
E.
[Cisco-400-251-1.0/xmlfile-11_6.png]
F.
[Cisco-400-251-1.0/xmlfile-10_1.png]
Refer to the exhibit. Which three additional configuration elements must you apply to complete a functional FlexVPN deployment? (Choose three.)
[Cisco-400-251-1.0/xmlfile-11_1.png]
A.
[Cisco-400-251-1.0/xmlfile-11_2.png]
B.
[Cisco-400-251-1.0/xmlfile-11_3.png]
C.
[Cisco-400-251-1.0/xmlfile-11_4.png]
D.
[Cisco-400-251-1.0/xmlfile-11_5.png]
E.
[Cisco-400-251-1.0/xmlfile-11_6.png]
F.
Answer: BDE
Question #15 (Topic: Topic 1)
You are considering using RSPAN to capture traffic between several switches.
Which two configurations aspects do you need to consider? (Choose two.)
Which two configurations aspects do you need to consider? (Choose two.)
A. Not all switches need to support RSPAN for it to work
B. The RSPAN VLAN need to be blocked on all trunk interfaces leading to the destination RSPAN switch
C. All switches need to be running the same IOS version
D. All distribution switches need to support RSPAN
E. The RSPAN VLAN need to be allow on all trunk interfaces leading to the destination RSPAN switch
Answer: DE
