Online Access Free 400-251 Practice Test

A university has hired you as a consultant to advise them on the best method to prevent DHCP starvation attacks in the campus. They have already implemented DHCP snooping and port security to control the situation but those do not fully contain the issue. Which two actions do you suggest to fix this issue? (Choose two.)

• A.Use the ip dhcp snooping limit rate command on Trusted and Untrusted interfaces and set the rate to suitable values that are relevant to each interface respectively.
• B.Use the ip dhcp snooping limit rate command only on Untrusted interfaces and set the rate to suitable values that are relevant to the interface.
• C.Use the ip dhcp snooping limit rate command on trusted and untrusted interfaces set to the rate same value.
• D.Use the ip dhcp snooping verify mac-address command to ensure that the source MAC address in the DHCP request matches the client hardware address (CHADDR) sent to the DHCP server.
• E.Use the ip dhcp snooping limit rate command only to ensure that the source MAC address in the DHCP request matches the client identifier (CLID) field sent to the DHCP server.
• F.Use the ip dhcp snooping verify mac-address command to ensure that the source MAC address in the DHCP request matches the client identifier (CLID) field sent to the DHCP server.

Which statement about host data collection using Cisco Firepower system is true?

• A.It depends on the traffic analytics reported by the added host in the system.
• B.The system prohibits the collection of host data using the NetFlow to avoid inconsistencies
• C.The system uses host fingerprint to relay host information to ISE using pxGrid.
• D.It does not have the information on host hops separation from the discovery point.
• E.It can report the operating system running on the host.

Which configuration management tools does the Cisco Nexus 9000 platform support?

• A.Salt
• B.Puppet
• C.Chef
• D.Jenkins
• E.Ansible

While troubleshooting access to site www.cciedomain.com you notice the following access_logs line Cisco Web Security Appliance (WSA)?

Which two of the following statements is true regarding this request?

• A.www.cciedomain.com (or subdomains of cciedomain.com) are part of a custom URL category
• B.WSA blocked traffic from client 10.10.42.42 to https://www.cciedomain.com
• C.WSA allowed traffic from client 10.10.42.42 to htpps://www.cciedomain.com
• D.The request matched Default Access Policy
• E.The request matched W_LIST Access Policy

Which criteria does ASA use for packet classification if multiple contexts share an ingress interface MAC address?

• A.destination MAC address
• B.ASA NAT configuration
• C.ASA egress interface IP address
• D.policy-based routing on ASA
• E.ASA ingress interface MAC address
• F.ASA ingress interface IP address
• G.destination IP address