400-251 pass

死胖子123

基本141Q题目覆盖90%，碰到几个新题和之前有人发过的题，一并总结如下：
141Q里面的答案不一定对，但是要记住考过应该问题不大。
( w# X5 z( ^+ f其他人考过的，提到的题目这次都碰到了。
1. BGP TTL Security，可以查下cisco文档，http://www.cisco.com/c/en/us/td/ ... /guide/fs_btsh.html. Z, I% x7 F- Z
BGP Support for TTL Security Check

The BGP Support for TTL Security Check feature introduces a lightweight security mechanism to protect external Border Gateway Protocol (eBGP) peering sessions from CPU utilization-based attacks using forged IP packets. Enabling this feature prevents attempts to hijack the eBGP peering session by a host on a network segment that is not part of either BGP network or by a host on a network segment that is not between the eBGP peers.

2. CoA   :　主要考session terminate，reauthentication等，看看这个文档吧　http://www.cisco.com/c/en/us/td/ ... ok/sec-rad-coa.html
1 F3 l+ o7 Y: R5 \3. 还有一个问哪个是stream cipher？

4.
& b5 b# x0 ]9 {$ n  j0 L# z

Which three statements  about the keying methods  used by MACSec are true? (Choose three.)

B. A valid  mode for SAP is NULL.

C. MKA is implemented as an EAPoL packet exchange.

E. SAP is not supported on switch SVIs.

5

sfenlang2

谢谢战报！！！！！！

sfenlang2

请问一下5是什么？

死胖子123

补充5，是问ASA与LDAP认证的描述，答案太多太长，没记住。大体是支持LDAP attribute什么的？

Rockyw

恭喜，恭喜

shanjia

死胖子123 发表于 2017-6-27 12:34
补充5，是问ASA与LDAP认证的描述，答案太多太长，没记住。大体是支持LDAP attribute什么的？

" e5 `' x8 V8 `% t, ^% ?Which two statements about Cisco ASA authentication using LDAP are true? (Choose two.)
7 ^, R' L/ q) d, X# P& }& l4 `+ [7 z
A. It uses attribute maps to map the AD memberOf attribute to the cisco ASA Group-Poilcy attribute
B. It uses AD attribute maps to assign users to group policies configured under the WebVPN context
# n, R; K. B) Q- m$ r. v* QC. The Cisco ASA can use more than one AD memberOf attribute to match a user to multiple group policies
1 |* T# p/ f3 ]- M  cD. It can assign a group policy to a user based on access credentials
: m* g- p4 H0 GE. It can combine AD attributes and LDP attributes to configure group policies on the Cisco ASA
* {3 z, u7 T9 QF. It is a closed standard that manages directory-information services over distributed networks
: C# K$ `, ?# g1 G  z" ]
是这个题吗？

死胖子123

shanjia 发表于 2017-6-27 14:40
Which two statements about Cisco ASA authentication using LDAP are true? (Choose two.)
/ O/ y! ^! i6 `3 h3 S+ t2 `
A. It us ...

4 T: M: V; x7 k" q6 S% ?好像是！！！

死胖子123

shanjia 发表于 2017-6-27 14:40
0 H" O7 E: U2 n5 M+ T5 x) J! xWhich two statements about Cisco ASA authentication using LDAP are true? (Choose two.)
. C! m6 z% Y* L4 l
A. It us ...

2 T) E2 {, R. \# i8 B: `4 p好像是！！！

死胖子123

还有一个无线安全的拖拽题的答案是错误的，请教了高手，正确答案应该是，WSM,MSE,WLC,PI,LOCAL+IPS,LOCAL,MONITOR

john77

john77

shyshysh448

ntlust

那道无线安全拖拽题答案确定吗？

gohlex

谢谢战报

jtrzxf

答案都正确吗？听说答案有错的。。。