Latest | Cisco CCIE Security 400-251 Practice Test Questions

CISCO 400-251 Cisco CCIE Security Certification Questions & Answers Cisco Certifications help you launch and advance your IT Networking career. This Cisco CCIE Security 400-251 PDF gives you the opportunity to identify any knowledge gaps so you can refine your study strategy and ensure a good score in 400-251 exam.

NWExam.com

400-251 Exam Questions

400-251 CCIE Security Practice Test NWexam.com’s 400-251 PDF is a comprehensive document containing questions and answers that are compiled and approved by Cisco CCIE Security Certified Professionals, so you may rest assured that you have reliable preparation materials. Passing a CCIE S certification exam requires more than buying books and watching videos. You need to explore many practice test questions to be familiar with the test. No matter how much you read during the preparation for your CCIE Security certification exam if you don’t have any clue what the exam pattern is, there is no way you can develop your confidence before the test. Taking practice tests is therefore very crucial to your success in the CCIE Security exam.

CCIE Security 400-251 Exam Details:-

Exam Name

Cisco Certified Internetwork Expert Security

Exam Number

400-251

Exam Price

$450 USD

Duration

120 minutes

Number of Questions

90-110

Passing Score

Variable (750-850 / 1000 Approx.)

Exam Registration

PEARSON VUE

Practice Exam

Cisco Certified Internetwork Expert Security Practice Test

Cisco CCIE Security Certification Practice Exam

www.nwexam.com

400-251 Exam Questions

Cisco CCIE S 400-251 Questions and Answers Set 01. How would you see the default IKE policy? a) show running b) wr t c) show crypto isakmp policy d) show crypto ike policy e) wr m Answer: c 02. In the IOS Firewall Feature Set, CBAC does not? a) Maintain state information for individual connections b) Use state information to allow or deny network traffic c) Use state information to allow or deny network traffic d) Dynamically create and delete openings in the firewall Answer: c 03. What is a limitation of Unicast RPF? a) Cisco express switching (CES) must be enabled. b) Multiple access-lists must be configured. c) A CA is required. d) Symmetrical routing is required.

Answer: d

Cisco CCIE Security Certification Practice Exam

www.nwexam.com

400-251 Exam Questions

04. At which layers of the OIS model do firewalls typically operate?

(Choose three.) a) Application b) Network c) Transport d) Session e) Physical Answer: a, b, c 05. For the following options, which security reporting system is analogous to CS-MARS? a) Security Incident Response System SIRT b) Security Information Management System SIM c) Security Reporting and Response System SRRS d) Security Threat Mitigation System STM Answer: d 06. According to RFC 1700, what well-known ports are used for DNS? a) TCP and UDP 23. b) UDP 53 only. c) TCP and UDP 53. d) UDP and TCP 69.

Answer: c

Cisco CCIE Security Certification Practice Exam

www.nwexam.com

400-251 Exam Questions

07. How can you tell what hosts are on your local network? a) The IP address of your host. b) The subnet mask of your host. c) The remote router's IP address. d) Your hub's IP address.

Answer: b 08. What does split horizon do? a) Keeps the router from sending routes out the same interface they came in. b) Sends a "route delete" back down the same interface that the route came in. c) Ignores routing updates. d) Waits for the next update to come in before declaring the route unreachable.

Answer: a 09. Crypto maps do which of the following?

(Choose four.) a) Define whether sa's are manual or via IKE. b) Define the transform set to be used. c) Define who the remote peer is. d) Define the local address. e) Define which IP source addresses, destination addresses, ports, and protocols are to be encrypted.

Answer: a, b, c, d

Cisco CCIE Security Certification Practice Exam

www.nwexam.com

400-251 Exam Questions

10. What is the purpose of a CA? (Choose two.) a) Manage and issue certificates. b) Simplify administration of IPSec devices. c) Define traffic flow. d) Help IPSec configurations to scale. e) Monitor IPSec statistics between sa's.

Answer: a, b

Cisco CCIE Security Certification Practice Exam

www.nwexam.com

400-251 Exam Questions

Get Full Online Practice of 400-251 Certification Practice tests on NWexam.com are by our professional expert team which are designed to test your knowledge and ensure your understanding about the technology. With our practice tests, you will be sure to pass the exams and get the CCIE Security certification. All the questions and answers provided on our site are valuable, totally beat the cheap and invalid materials.

We guarantee your success at your first attempt with our product.

Start Online practice of 400-251 Exam by visiting URL http://www.nwexam.com/cisco/400-251-ccie-security-ccie-s

Cisco CCIE Security Certification Practice Exam

www.nwexam.com