400-251 Actual Exam Questions

Last updated on Nov. 13, 2024.
Vendor:Cisco
Exam Code:400-251
Exam Name:CCIE Security Written Exam
Exam Questions:952
 

Topic 1 - Volume A

Question #1 Topic 1

In an 802.11 WLAN, which option is the Layer 2 identifier of a basic service set, and also is typically the MAC address of the radio of the access point?

  • A. BSSID
  • B. SSID
  • C. VBSSID
  • D. MBSSID
Reveal Solution Hide Solution   Discussion  

Correct Answer: A 🗳️

Question #2 Topic 1

What term describes an access point which is detected by your wireless network, but is not a trusted or managed access point?

  • A. rogue
  • B. unclassified
  • C. interferer
  • D. malicious
Reveal Solution Hide Solution   Discussion  

Correct Answer: A 🗳️

Question #3 Topic 1

A router has four interfaces addressed as 10.1.1.1/24, 10.1.2.1/24, 10.1.3.1/24, and 10.1.4.1/24. What is the smallest summary route that can be advertised covering these four subnets?

  • A. 10.1.2.0/22
  • B. 10.1.0.0/22
  • C. 10.1.0.0/21
  • D. 10.1.0.0/16
Reveal Solution Hide Solution   Discussion   1

Correct Answer: C 🗳️

Question #4 Topic 1

Which two address translation types can map a group of private addresses to a smaller group of public addresses? (Choose two.)

  • A. static NAT
  • B. dynamic NAT
  • C. dynamic NAT with overloading
  • D. PAT
  • E. VAT
Reveal Solution Hide Solution   Discussion  

Correct Answer: CD 🗳️

Question #5 Topic 1

Which authentication mechanism is available to OSPFv3?

  • A. simple passwords
  • B. MD5
  • C. null
  • D. IKEv2
  • E. IPsec AH/ESP
Reveal Solution Hide Solution   Discussion  

Correct Answer: E 🗳️

Question #6 Topic 1

Which two IPv6 tunnel types support only point-to-point communication? (Choose two.)

  • A. manually configured
  • B. automatic 6to4
  • C. ISATAP
  • D. GRE
Reveal Solution Hide Solution   Discussion  

Correct Answer: AD 🗳️

Question #7 Topic 1

Which two EIGRP packet types are considered to be unreliable packets? (Choose two.)

  • A. update
  • B. query
  • C. reply
  • D. hello
  • E. acknowledgement
Reveal Solution Hide Solution   Discussion  

Correct Answer: DE 🗳️

Question #8 Topic 1

Before BGP update messages may be sent, a neighbor must stabilize into which neighbor state?

  • A. Active
  • B. Idle
  • C. Connected
  • D. Established
Reveal Solution Hide Solution   Discussion  

Correct Answer: D 🗳️

Question #9 Topic 1

Which three statements are correct when comparing Mobile IPv6 and Mobile IPv4 support? (Choose three.)

  • A. Mobile IPv6 does not require a foreign agent, but Mobile IPv4 does.
  • B. Mobile IPv6 supports route optimization as a fundamental part of the protocol; IPv4 requires extensions.
  • C. Mobile IPv6 and Mobile IPv4 use a directed broadcast approach for home agent address discovery.
  • D. Mobile IPv6 makes use of its own routing header; Mobile IPv4 uses only IP encapsulation.
  • E. Mobile IPv6 and Mobile IPv4 use ARP for neighbor discovery.
  • F. Mobile IPv4 has adopted the use of IPv6 ND.
Reveal Solution Hide Solution   Discussion  

Correct Answer: ABD 🗳️

Question #10 Topic 1

Refer to the exhibit.

Which message could contain an authenticated initial_contact notify during IKE main mode negotiation?

  • A. message 3
  • B. message 5
  • C. message 1
  • D. none, initial_contact is sent only during quick mode
  • E. none, notify messages are sent only as independent message types
Reveal Solution Hide Solution   Discussion  

Correct Answer: B 🗳️

file Viewing page 1 out of 96 pages.
Viewing questions 1-10 out of 952 questions
Next Questions
Browse atleast 50% to increase passing rate cup
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
Loading ...
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago