Cisco CCIE Security Written Exam (v5.0) - 400-251무료 덤프문제 풀어보기

A. User succeeded and machine failed

B. User and NAD both succeeded

C. User and NAD both failed

D. User failed and machine succeeded

E. User and machine both failed

F. User and machine both succeeded

G. User succeeded and NAD failed

H. User failed NAD succeeded

A. It does not allow extension of zone-based firewall capabilities to VMs on VXLAN

B. It allows active/active failover operation mode when deployed as a high availability pair

C. It does not allow the third-party orchestration tool to interact with XML APIs for its provisioning

D. It applies the security profile only after VM instantiation

E. It provides trusted access to VMs in an enterprise data center

F. It allows administrative segregation, which allows the security administrator to author and manage port profiles

A. The SXP message uses MD5 for packet encryption

B. The TACACS connection keep alive using UDP originated from ASA

C. The ISE keep alive message for NDAC connection using TCP originated from ASA

D. The SXP keep alive message using TCP originated from ASA

E. The NTP keep alive message using UDP originate^from ISE

F. The RADIUS connection keep alive using TCP originated from ISE

G. The SXP message uses TCP port 64999 for connection termination

A. Mark The 802.1x attempt as failed

B. Request creation of the VLAN on the VTP server

C. Send a RADIUS CoA NACK packet to ISE

D. Treat the 802.1x attempt as passed and assign the default VLAN

E. Create the VLAN locally

A. In the global profiler settings, CoA type set to "No CoA"

B. An endpoint profiled for the first time

C. A profile policy exception is triggered

D. An endpoint disconnects from the network

E. An endpoint deleted from the ISE endpoint page

A. Enable IDPT on the switch

B. Add source IP address on the DACL in ISE

C. Add the "aaa accounting dot1x default" command on the switch

D. Apply a default ACL on the switchport

A. Incorrect ISAKMP policy configuration

B. Incorrect ACL defined for the traffic encryption

C. The crypto map is not applied on the correct interface

D. Incorrect static route

E. Incorrect crypto map configuration

F. Incorrect transform set configuration

G. Incorrect truspoint configuration

H. Incorrect BGP peer Configuration

A. Ether Channel

B. Tap

C. Redundant interface

D. Fail-To-Wire

E. Cluster