最新的Cisco CCIE Security Written Exam (v5.0) - 400-251免費考試真題

A. A cisco Firewall can perform stateful packet inspection based on SGT rules

B. Cisco TrustSec Uses the Security Group Tag (SGT) to enforce group access policies

C. SGT Exchange Protocol (SXP) is required for SGT propagation

D. IKEv2 can be used to negotiate and inform IPsec about SGT capability

E. Cisco TrustSec enforcement points can be a router switch, or firewall

A. Inline Pair

B. Inline Tap

C. Routed

D. Transparent

E. ERSPAN

A. Enable password

B. Enable privilege 15

C. Enable IOS_Admin_profile

D. Enable secret

E. Enable

F. Enable 15

G. Privilege level 15

A. SGT can only be assigned statically

B. SGT can be mapped to IP address and downloaded to SGT-capable devices

C. Dynamic SGT is a global value binded to all the ports

D. SGT can be assigned manually at the port level

E. SGT can be assigned dynamically and be downloaded as the result of an ISE authorization

F. SGT can only be assigned dynamically

A. Units must be configured in transparent mode

B. Units must not have the same major, minor, and maintenance software version running on them

C. Units must be synchronized using the same NTP source.

D. Units can have any uncommitted changes on FMC and need not be fully deployed

E. Units must have DHCP configured for the interfaces

F. Units must be configured in routed mode

G. Units must be in different domains in FMC

A. HTTPS access to WSA's Management interface is enabled by default

B. Cisco Web Security Appliance (WSA) Management interface can be accessed using GUI interface only

C. Cisco Web Security Appliance (WSA) has HTTPS decryption services enabled by default

D. FTP access to WSA's Management interface is enabled by default

A. Reduce the number of false negatives

B. Increase the number of true positives

C. Increase the number of true negatives

D. Reduce the number of false positives

A. WSA policies can be configured using GUI interface only

B. WSA can not decrypt HTTPS traffic

C. WSA can have only one routing table

D. WSA does not offer out-of-bound Management capability

A. To create exception rules

B. To keep RADIUS and TACACS+ policies separate from each other

C. Create different Authentication and Authorization policies for distinct use cases

D. Create different Authorization Policies for a single authentication policy

E. Create different Authentication policies for different use cases while using a single Authorization policy

A. Add the "aaa accounting dot1x default" command on the switch

B. Apply a default ACL on the switchport

C. Add source IP address on the DACL in ISE

D. Enable IDPT on the switch