Free Cisco 400-251 Exam Dumps Questions & Answers

Which three policies are building blocks of vSmart policies architecture? (Choose three)

• A.service policy
• B.control policy
• C.application aware policy
• D.data policy
• E.bandwidth policy
• F.site policy

With Cisco NGFW what is used to normalize traffic in order to minimize the chance that an attacker can evade detection using inline deployments?

• A.Security Intelligence
• B.Preprocessors
• C.Events Action Filters
• D.Pre-Filters
• E.Lina Processors

Which description of TAP mode deployment in IPS is true?

• A.Access rules configured in TAP mode generate events
• B.In TAP mode, traffic flow gets distributed for analysis
• C.TAP mode is available when ports are configured as passive interfaces
• D.TAP mode implementation requires SPAN configuration on a switch
• E.Access rules configured in TAP mode generate events when trigged and performs defined action on the traffic stream
• F.TAP mode is not available when IPS is deployed inline

Which statement about the Traffic Substitution and Insertion attack is true?

• A.It substitutes payload data in a different format but has the same meaning.
• B.It substitutes payload data in the same format but has different meaning.
• C.It is form of a DoS attack.
• D.It is a form pivoting in the network
• E.It is used for reconnaissance.
• F.It substitutes by performing action slower than normal not exceeding threshold
• G.It substitutes by performing action faster than normal not exceeding threshold

Which function of MSE in the WIPS architecture is true?

• A.detects rogue Aps
• B.applies rogue policy to mitigate rogue threats
• C.scans channels without impacting data-serving radios
• D.detects over-the-air traffic network anomalies and attacks
• E.provides view of security threats
• F.channel to connect with ISE to implement CoA
• G.performs the correlation of security events