Cisco 400-251 Exam Questions

Question 6 of 686

Which three statements are true about MACsec? (Choose three.)

A.

It supports GCM modes of AES and 3DES.

B.

It is defined under IEEE 802.1AE.

C.

It provides hop-by-hop encryption at Layer 2.

D.

MACsec expects a strict order of frames to prevent anti-replay.

E.

MKA is used for session and encryption key management.

F.

It uses EAP PACs to distribute encryption keys.

Correct Answer: B, C, E

Question 7 of 686

Which SSL protocol takes an application message to be transmitted, fragments the data into manageable blocks, optionally compresses the data, applies a MAC, encrypts, adds a header, and transmits the resulting unit in a TCP segment?

A.

SSL Handshake Protocol

B.

SSL Alert Protocol

C.

SSL Record Protocol

D.

SSL Change CipherSpec Protocol

Correct Answer: C

Question 8 of 686

IPsec SAs can be applied as a security mechanism for which three options? (Choose three.)

A.

Send

B.

Mobile IPv6

C.

site-to-site virtual interfaces

D.

OSPFv3

E.

CAPWAP

F.

LWAPP

Correct Answer: B, C, D

Question 9 of 686

Which four options are valid EAP mechanisms to be used with WPA2? (Choose four.)

A.

PEAP

B.

EAP-TLS

C.

EAP-FAST

D.

EAP-TTLS

E.

EAPOL

F.

EAP-RADIUS

G.

EAP-MD5

Correct Answer: A, B, C, D

Question 10 of 686

Which three statements are true about the SSH protocol? (Choose three.)

A.

SSH protocol runs over TCP port 23.

B.

SSH protocol provides for secure remote login and other secure network services over an insecure network.

C.

Telnet is more secure than SSH for remote terminal access.

D.

SSH protocol runs over UDP port 22.

E.

SSH transport protocol provides for authentication, key exchange, confidentiality, and integrity.

F.

SSH authentication protocol supports public key, password, host based, or none as authentication methods.

Correct Answer: B, E, F