400_251 questions • Exam prepare

Exam contains 686 questions

Page 21 of 115

Question 121 🔥

Which statement about Infrastructure ACLs on Cisco IOS software is true?

Which database solution meets these requirements?

A. Infrastructure ACLs are used to protect the device forwarding path.

B. Infrastructure ACLs are used to protect device management and internal link addresses.

C. Infrastructure ACLs are used to authorize the transit traffic.

D. Infrastructure ACLs only protect device physical management interface.

Discussion of the question

Question 122 🔥

Which three statements about SXP are true? (Choose three.)

Which database solution meets these requirements?

A. To enable an access device to use IP device tracking to learn source device IP addresses, DHCP snooping must be configured.

B. Each VRF supports only one CTS-SXP connection.

C. It resides in the control plane, where connections can be initiated from a listener.

D. Separate VRFs require different CTS-SXP peers, but they can use the same source IP addresses.

E. The SGA ZBPF uses the SGT to apply forwarding decisions.

F. Packets can be tagged with SGTs only with hardware support.

Discussion of the question

Question 123 🔥

Which two options are benefits of the Cisco ASA Identity Firewall? (Choose two.)

Which database solution meets these requirements?

A. It can identify threats quickly based on their URLs.

B. It can operate completely independently of other services.

C. It supports an AD server module to verify identity data.

D. It decouples security from the network topology.

E. It can apply security policies on an individual user or user-group basis.

Discussion of the question

Question 124 🔥

Refer to the exhibit.Which three statements are true? (Choose three.)

Which database solution meets these requirements?

A. Because of a "root delay" of 0ms, this router is probably receiving its time directly from a Stratum 0 or 1 GPS reference clock.

B. This router has correctly synchronized its clock to its NTP master.

C. The NTP server is running authentication and should be trusted as a valid time source.

D. Specific local time zones have not been configured on this router.

E. This router will not act as an NTP server for requests from other devices.

Discussion of the question

Question 125 🔥

Refer to the exhibit.Assume that there is no disjoint Layer 2 configuration. Based on the output, what will happen if uplink eth1/7 on FI-A fails?

Which database solution meets these requirements?

A. The host will lose Ethernet uplink connectivity on FI-

B. Fabric failover will force the vNIC that is bound to FI-A to use uplink eth1/7 on FI-

C. Cisco UCS Manager will disable the host vNIC that is connected to FI-A.

D. Traffic from any hosts using this pin group will use e1/8 on FI-A.

Discussion of the question

Question 126 🔥

Which two options represent definitions that are found in the syslog protocol (RFC 5426)? (Choose two.)

Which database solution meets these requirements?

A. Syslog message transport is reliable.

B. Each syslog datagram must contain only one message.

C. IPv6 syslog receivers must be able to receive datagrams of up to 1180 bytes.

D. Syslog messages must be prioritized with an IP precedence of 7.

E. Syslog servers must use NTP for the accurate time stamping of message arrival.

Discussion of the question

Ready to Pass Your Certification Test

cisco 400_251

Exam contains 686 questions

Lorem ipsum dolor sit amet consectetur. Eget sed turpis aenean sit aenean. Integer at nam ullamcorper a.

Company

Product

Resources

Follow us