Online Access Free 400-251 Practice Test

Which are three similarities between containers and virtual machines? (Choose three)

• A.allow custom routes
• B.private space for processing
• C.public interface
• D.share host system kernel
• E.private network interface and IP address
• F.cannot mount file systems

Which is true regarding Authentication Proxy?

• A.It triggers only on HTTP connection
• B.It applies a global ACL If the user authentication information not found
• C.It does not apply the DACL for the traffic passing through the device
• D.It triggers on HTTP, HTTPS and FTP connections
• E.It first checks if the NAT entry exists for the destination host
• F.It prompts user with a web-based authentication if user authentication information found

Which of the following security services is available on Cisco Email Security Appliance (ESA)?

• A.Cisco Image Analysis
• B.Virus Offload Filters
• C.HTTP load-balancing
• D.Trend Micro Anti-Virus Engine

A university has hired you as a consultant to advise them on the best method to prevent DHCP starvation attacks in the campus. They have already implemented DHCP snooping and port security to control the situation but those do not fully contain the issue. Which two actions do you suggest to fix this issue? (Choose two.)

• A.Use the ip dhcp snooping limit rate command only to ensure that the source MAC address in the DHCP request matches the client identifier (CLID) field sent to the DHCP server.
• B.Use the ip dhcp snooping limit rate command only on Untrusted interfaces and set the rate to suitable values that are relevant to the interface.
• C.Use the ip dhcp snooping verify mac-address command to ensure that the source MAC address in the DHCP request matches the client identifier (CLID) field sent to the DHCP server.
• D.Use the ip dhcp snooping limit rate command on Trusted and Untrusted interfaces and set the rate to suitable values that are relevant to each interface respectively.
• E.Use the ip dhcp snooping verify mac-address command to ensure that the source MAC address in the DHCP request matches the client hardware address (CHADDR) sent to the DHCP server.
• F.Use the ip dhcp snooping limit rate command on trusted and untrusted interfaces set to the rate same value.

Which two of the following correctly describe the protocols used in wireless security? (Choose two)

• A.WPA2 requires mandatory use of AES algorithms for encryption
• B.WPA only supports TKIP as the data encryption algorithm
• C.Temporal Key Integrity Protocol (TKIP) uses 128-tut static keys
• D.Both WPA and WPA2 support the CCMP protocol
• E.WEP (Wired Equivalent Privacy) uses RC4 stream cipher to provide data confidentiality