Free Cisco 400-251 Exam Dumps Questions & Answers

Refer to the exhibit.

The FMC with address 161.1.7.16 is not seeing AMP Connector scan events that are reported to the AMP cloud for the "test pc" Windows machine that belongs to "protect" group. Which cause to the issue is true?

• A.The FMC was not added in the AMP cloud.
• B.The AMP cloud was not added in the FMC.
• C.The Event must be viewed as a Connection event in the FMC.
• D.The Windows machine belongs to an incorrect group in the AMP cloud policy
• E.The Windows machine is not reporting events to the FMC
• F.The incorrect group is selected for the events export in the AMP cloud for the FMC.
• G.The Windows machine is not reporting scan events to the AMP cloud.

What are the three types of CoA we use in ISE? (Choose three)

• A.No CoA (Change of authorization)
• B.PoD (Packet of Disconnect)
• C.Port Bounce
• D.Terminate
• E.Reauth

While troubleshooting access to site www.cciedomain.com you notice the following access_logs line Cisco Web Security Appliance (WSA)?

Which two of the following statements is true regarding this request?

• A.The request matched Default Access Policy
• B.WSA blocked traffic from client 10.10.42.42 to https://www.cciedomain.com
• C.www.cciedomain.com (or subdomains of cciedomain.com) are part of a custom URL category
• D.WSA allowed traffic from client 10.10.42.42 to htpps://www.cciedomain.com
• E.The request matched W_LIST Access Policy

Which configuration management tools does the Cisco Nexus 9000 platform support?

• A.Puppet
• B.Jenkins
• C.Ansible
• D.Chef
• E.Salt

In SNORT rules, the rule header contains which five elements? (Choose five)

• A.Source and destination IP addresses and netmasks
• B.Direction operator
• C.Name
• D.Message
• E.Sid
• F.Action
• G.Protocol
• H.Source and destination ports