[Free] 2018(July) Dumps4cert VMware 2V0-651 Dumps with VCE and PDF Download 31-40

Dumps4cert.com : Latest Dumps with PDF and VCE Files
2018 July VMware Official New Released 2V0-651
100% Free Download! 100% Pass Guaranteed!

CCIE Security Exam (v4.1)

Question No: 31 – (Topic 1)

Refer to the exhibit.

What is the effect of the given configuration?

1. FTP connections are unaffected

2. It resets and logs FTP connections to cisco.com and hp.com only

3. It resets FTP connections to cisco.com and hp.com only.

4. It resets FTP connections to all sites except cisco.com and hp.com

5. It resets and logs FTP connections to all except cisoc.com and hp.com

Answer: D

Question No: 32 – (Topic 1)

What are three ways you can enforce a BCP38 policy on an Internet edge device? (Choose three.)

1. Avoid RFC 1918 internal addressing.

2. Apply ingress filters for RFC 1918 addresses

3. Apply ingress ACL. Filters for BOGON routes

4. Implement source NAT

5. Implement Unicast RPF.

6. Implement Cisco Express Forwarding.

Answer: B,C,E

Question No: 33 – (Topic 1)

Which two options describe the main purpose of EIGRP authentication?(Choose two)

1. to allow faster convergence

2. to identify authorized peers

3. to provide redundancy

4. to provide routing updates confidentiality

5. to prevent injection of incorrect routing information

Answer: B,E

Question No: 34 – (Topic 1)

For which reason would an RSA key pair need to be removed?

1. PKI architecturewould never allow the RSA key pair removal

2. The existing CA is replaced and the new CA requires newly generated keys

3. The CA is under DoS attack

4. The CA has Suffered a power outage

Answer: B

Question No: 35 – (Topic 1)

Which two statements about PCI DSS are true ?(Choose two)

1. it is a criminal act of cardholder information fraud.

2. it is an IETF standard for companies to protect credit, debit ,and ATM cardholder information.

3. it has as one of its objectives to restrict physical access to credit, debit ,and ATM cardholder information.

4. it is a US government standard that defines ISP security compliance

5. it is a proprietary security standard that defines a framework for credit, debit ,and ATM cardholder information.

Answer: C,E

Question No: 36 – (Topic 1)

What are three IPv6 extension headers?(Choose three)

1. Hop-by-Hop Options

2. Swgment

3. TTL

4. Source Options

5. Authentication Header

6. Destination Options

Answer: A,E,F

Question No: 37 – (Topic 1)

What are two characteristics of RPL ,used in loT environments ? (Choose two)

1. it is distance-vector protocol

2. it is a Interior Gateway Protocol

3. it is link-state protocol

4. it is a hybrid protocol

5. it is an Exterior Gateway Protocol

Answer: A,E

Question No: 38 – (Topic 1)

Which two values must you configure on the Cisco ASA firewall to support FQDN ACL?(Choose two.)

1. a DNS server

2. a policy map

3. an FQDN object

4. a service object

5. a class map

6. a service policy

Answer: A,C

Question No: 39 – (Topic 1)

Refer to the exhibit.

R1 and R2 are failing to establish a BGP neighbor relationship.

What is a Possible reason for the problem?

1. The neighbor remote-as command on R2 uses an incorrect AS number

2. The BGP timers on R1 and R2 are different

3. R2 is configured with a private AS

4. The no synchronization command is missing from R1’S configuration

5. The dbgp-multihop values on R1 and R2 are different

6. The no auto-summary command is missing from R2’S configuration.

Answer: A

Question No: 40 – (Topic 1)

What are the two technologies that support AFT?(Choose two)

1. NAT-6to 4

2. NAT-PT

3. DNAT

4. NAT64

5. NAT-PMP

6. SNAT

Answer: B,D

100% Dumps4cert Free Download!
–Download Free Demo:2V0-651 Demo PDF
100% Dumps4cert Pass Guaranteed!
–2V0-651 Dumps

	Dumps4cert	ExamCollection	Testking
Lowest Price Guarantee	Yes	No	No
Up-to-Dated	Yes	No	No
Real Questions	Yes	No	No
Explanation	Yes	No	No
PDF VCE	Yes	No	No
Free VCE Simulator	Yes	No	No
Instant Download	Yes	No	No