400-251新题答案征集

asd8765579

大家都知道最近400-251出新题了。 前几个帖子的@yanggui319 安利了一个176版本的。我帮他把新题截图截了出来。各位大神帮忙看看答案， 下周打算用这个版本去试水，大家可以等我消息，不过在这之前有些题库疑问看看有没有大神答疑。



对于这两道题，问题问的是如何 在接口上开启 802.1x的认证（authentication）和授权（author---）, 在@yanggui319的版本中，开启认证选的答案是“authentication port-control auto”     ，开启授权选择的是"aaa authorization network default group tacacs+"  我觉得是很合理的，而置顶166版本中两道题都选了authentication port-control auto。   但是166版本又过了很多人。。究竟谁对谁错，有大神给出个答案不。




# g. ^0 L) R/ Z5 u' |下面是比166版本多出来的一些新题题目：
new1：
0 x; d* R* E7 S+ }2 _               Which type of attack use a large number of spoofed MAC addresses to emulate wireless client?(Choose one)
! T2 Y% r! M1 B& f2 n! PA.DoS against an access point
% [2 o4 F. L, V( J9 E4 ^- `! IB.Dos against a client station
C.chopchop attack
D.Airsnaf attack
E.device-probing attack
! }7 P: F! [3 E- b! D% fF.authentication-failure attack
. \7 p5 e; S4 n* G) v+ P/ k9 g
new2:
' L" P6 H/ G. e. A                What are two characteristics of RPL, used in IoT environments?(Choose two)
; t& ~2 _. b$ G2 ]+ cA.It is an Exterior Gateway Protocol
B.It is a Interior Gateway Protocol
C.It is a hybrid protocol
/ X$ V9 P) Z1 @+ H0 o0 VD.It is link-state protocol
$ t# A% @9 D8 P) E- }3 `E.It is a distance-vector protocol

new3:
9 k: X% I* }6 q               Which command is required for bonnet filter on Cisco ASA to function properly?(Choose one)
A.dynamic-filter inspect tcp /80
B.dynamic-filter whitelist
C.inspect botnet
3 w1 v3 Z+ ?# u$ ]D.inspect dns dynamic-filter-snoop

new4:
' N& y* m! t3 h6 s1 Q             Which two statements about Cisco AMP for Web Security are true? (Choose two)
A.It can detect and block malware and other anomalous traffic before it passes through the Web gateway.
B.It can identify anomalous traffic passing through the Web gateway by comparing it to an established baseline of expected activity
* P) ^3 a% L% S! R# DC.It can perform file analysis by sandboxing known malware and comparing unknown files to a local repository of threats
& `. A! z5 i) X( Q1 xD.It continues monitoring files after they pass the Web gateway
2 j# o: b/ f1 x0 X/ c1 \E.It can prevent malicious data exfiltration by blocking critical files from exiting through the Web gateway
F.It can perform reputation-based evaluation and blocking by uploading of incoming files to a cloud-based threat intelligence network

8 m7 y7 \: F. Qnew5:
            Which two statements about MACsec are true? (Choose two)
* _/ I1 W7 _6 @+ h2 L& y6 HA.It maintains network intelligence as it applied to router uplinks and downlinks.
B.It works in conjunction with IEEE 802.1X -2010 port-based access control.
C.It uses symmetric-key encryption to protect data confidentiality.
D.It encrypts packets at Layer 3, which allows devices to handle packets in accordance with network polices.
E.It can be enabled on individual port at Layer 3 to allow MACsec devices to access the network.
( J& p" E. v! W  \# v7 R/ @F.It can use IEEE 802.1x master keys to encrypt wired and wireless links
1 W0 ^$ Q  d! K$ u
4 M. P2 j0 Y. y0 o" t+ wnew6:
1 y; Z5 P! R& z0 A" p8 D          Which statement about Password Authentication Protocol is true?(Choose one)
A.RADIUS –based PAP authentication logs successful authentication attempts only.
B.Its password in encrypted with a certificate.
C.It offers strong protection against brute force attacks.
- z) k5 Q) Q) gD.RADIUS –based PAP authentication is based on the RADIUS Password attribute
E.It is the most secure authentication method supported for authentication against the internal Cisco ISE database
) z  o( w8 r2 D1 ^- _1 ZF.It uses a two-way handshake with an encrypted password

new7:
         What technique can an attacker use to obfuscate a malware application payload, allowing it to bypass standard security mechanisms?（Choose one）
A.Teredo tunneling
B.A PE32 header
C.Steganography
D.BASE64
E.Decryption
/ ]' K; U& z, p& I  c+ D% r
% o4 G/ a  \( }4 m% anew:8
       Which tunnel type does the Cisco unified Wireless Solution use to map a provisioned guest WLAN to an anchor WLC?(Choose one)
3 z7 R% z7 q% g( Y3 j/ e9 C9 LA.PEAP
! a/ _6 D3 p9 G# XB.IPsec
C.TLS
5 C+ Y% L0 l0 h, X8 A0 wD.GRE
E.EAPoL
1 ^) x5 a! R8 I& y- @/ l# ?F.EoIP
5 m9 t  ?- ~) A! u3 ^& {$ k
new 9:
       Which statement about the Firepower Security Intelligence feature is true?(Choose one)
A.It uses user-configured ACLs to blacklist and whitelist traffic
B.It can override custom whitelists to provide greater security against emerging threats
  O. @% i# M& y9 |C.It filters traffic after policy-based inspection is complete and before the default action is taken
* ~( z; n$ l7 A7 g! ^8 B/ iD.Blacklisted traffic is blocked without further inspection
E.It filters traffic after policy-based inspection is completed and the default action is taken
7 Q- R2 r. q, U7 w/ r0 R% c; q
7 K7 G/ D( Y+ o. [( c9 q3 D
+ y5 K0 |7 O9 v
4 b8 @0 [8 i# e+ ^. J2 inew 10:
      Which statement about the Cisco AMP Virtual Private Cloud Appliance is true for deployments in cloud-proxy mode?(Choose one)
( Y5 O) G5 B5 \& mA.The appliance can perform disposition lookups against the Protect DB without an internet connection
B.The amp-sync tool syncs the threat-intelligence repository on the appliance on the AMP public cloud through the Update Host
C.The appliance can automatically download threat-intelligence updates directly from the AMP public cloud
9 B/ U# c" ?& J/ B( fD.The updates Host automatically downloads updates and deploys them to the Protect DB on a daily basis
E.The appliance communicates directly with the endpoint connectors only

' P( v/ v) @* c9 P/ j& r1 Unew10题要小心，因为166题库中有一道题是
      Which statement about the Cisco AMP Virtual Private Cloud Appliance is true for deployments in air-gap mode?(Choose one)
4 h; `( T0 h( S" p那道题的答案是The appliance can perform disposition lookups against the Protect DB without an internet connection
; q( l. I4 w# `) G. A

asd8765579

红色标志的是新题版本给出的答案。 如果对题目答案有异议可以评论各抒己见

dgfdfdgfd

今天考试遇到了开启 802.1x的认证的题，反正我选的是都是根据置顶帖选的答案port-control auto

asd8765579

dgfdfdgfd 发表于 2017-11-26 12:35
9 {6 c: a; \/ h5 N今天考试遇到了开启 802.1x的认证的题，反正我选的是都是根据置顶帖选的答案port-control auto

您看看您考试的时候有没有遇到上面我手打上面那些新题？

asd8765579

dgfdfdgfd 发表于 2017-11-26 12:35
今天考试遇到了开启 802.1x的认证的题，反正我选的是都是根据置顶帖选的答案port-control auto

. V1 P" L* a4 D9 ?5 f5 b您看看您考试的时候有没有遇到上面我手打那些新题？

dgfdfdgfd

asd8765579 发表于 2017-11-26 12:59
5 C& e/ t) V8 _# o! @- k您看看您考试的时候有没有遇到上面我手打那些新题？

) _  n, F# _8 _" \# d, J遇到了new 1,4,5,7,8

liuhy82

楼上兄弟， Q166 的拖图题考到了吗？
还有题库里的165，166 都没有题目，只有答案，是啥描述啊？干背答案？ 考到了吗？

zhw85611

关于认证和授权的开启，当然是不一样的，截图的答案是没有问题的。

shyshysh448

shyshysh448

Rockyw

分享是美德，回帖是支持。感谢论坛的每一个人。

rita_where

感謝整理

ultrajj_CCIE

楼主考了吗？我也准备试一下

zack678777

thanks for sharing

hellben

恭喜楼主