Free Cisco 400-251 Exam Dumps Questions & Answers

Refer to the exhibit.

Users cannot access web servers 192.168.101.3/24 and 192.168.102.3/24 using FireFox web browser when initiated from 172.61.1.0/24 network. Which possible cause is true?

• A.  The custom URL category "Allowed Sites" has an incorrect server address listed
• B.  The access policy "Allow Policy" has an incorrect action set for the custom URL category
• C.  The identification profile "Allow Profile" has an incorrect protocol
• D.  The identification profile "allow profile" has an incorrect source network
• E.  The identification profile "Allowed Profile" has a misconfigured user agent
• F.  The access policy "Allow policy" is porting to an incorrect identification profile

What are the advantages of using LDAP over AD is true?

• A.  LDAP does not require ISE to join the AD domain
• B.  LDAP allows for granular policy control, whereas AD does not.
• C.  LDAP can be configured to use primary and secondary server, whereas AD cannot.
• D.  LDAP provides for faster authentication
• E.  The closest LDAP servers are used for Authentication

What are the three types of CoA we use in ISE? (Choose three)

• A.  Reauth
• B.  Port Bounce
• C.  PoD (Packet of Disconnect)
• D.  Terminate
• E.  No CoA (Change of authorization)

Which are the three remediation types that cannot be configured in stealth mode posture? (Choose three)

• A.  USB remediation
• B.  Patch management remediation
• C.  Link remediation
• D.  File remediation
• E.  Manual remediation

How would you prevent making Cisco Email Security Appliance (ESA) an opened relay?

• A.  Include all of your email domains into HAT table into one of the WHITELIST Sender Groups of your Public Listener
• B.  Make sure to configure ESA RAT (Recipient Access Table) of incoming Mail Listener (Public listener) so it accepts emails for all the domains ESA is responsible for and rejects emails towards all other recipient domains
• C.  Handle this by specific configuration of incoming Mail Flow policy
• D.  Make sure ESA Private Listener has appropriate external sender domains explicitly included in RELAYLIST in Private Listener's HAT (Host Access Table)