400-251 Exam Dumps | An employee using an Android phone on your network has disabled DHCP, enabled its firewall, modified

Home
Cisco
CCIE Security Written Exam (v5.0)
Cisco.400-251.v2018-12-10.q154
Question 122

Valid 400-251 Dumps shared by EduDump.com for Helping Passing 400-251 Exam! EduDump.com now offer the newest 400-251 exam dumps, the EduDump.com 400-251 exam questions have been updated and answers have been corrected get the newest EduDump.com 400-251 dumps with Test Engine here:

Access 400-251 Dumps Premium Version
(125 Q&As Dumps, 35%OFF Special Discount Code: freecram)

<< Prev Question Next Question >>

Question 122/154

An employee using an Android phone on your network has disabled DHCP, enabled its firewall, modified its HTTP User-Agent header, to fool ISE into profiling it as a Windows 10 machine connected to the wireless network. This user is now able to get authorization for unrestricted network access using his Active Directory credentials, as your policy states that a Windows device using AD credentials should be able to get full network access. Whereas, an Android device should only get access to the Web Proxy.
Which two steps can you take to avoid this sort of rogue behavior? (Choose two.)

A. Create an authentication rule that should only allow session with a specific HTTP User-Agent header.

B. Chain an authorization policy to the Windows authorization policy that performs additional NMAP scans to verify the machine type, before allowing access

C. Add an authorization policy before the Windows authorization policy that redirects a user with a static IP to a web portal for authentication

D. Perform CoA to push a restricted access when the machine is acquiring address using DHCP

E. Modify the authorization policy to only allow Windows machines that have passed Machine Authentication to get full network access.

F. Only allow certificate-based authentication from Windows endpoints, such as EAP-TLS or PEAP-TLS.
Should the endpoint use MSCHAPv2 (EAP or PEAP), the user should be only given restricted access.

Correct Answer: D,F

Your email address will not be published. Required fields are marked *

Comment: *

Name: *

Email: *

Rating: *

Verification: *

Question List (154q): Question 1: A device on your internal network is hard-coded with two DNS...; Question 2: Exhibit (Exhibit) Refer to the exhibit. R15 is trying to ini...; Question 3: (Exhibit) Refer to the exhibit. AMP cloud is configured to r...; Question 4: Which two statements about MAB are true? (Choose two.)...; Question 5: View the Exhibit. (Exhibit) Refer to the exhibit. Which effe...; Question 6: Which two statements about Botnet Traffic Filter snooping ar...; Question 7: Which three options are fields in a CoA Request code packet?...; Question 8: Which file extensions are supported on the Firesight Managem...; Question 9: Which statement is true regarding the wireless security tech...; Question 10: Which three ISAKMP SA Message States can be output from the ...; Question 11: (Exhibit) Refer to the exhibit. FMC with address 161.1.7.15 ...; Question 12: Which two statements about 802.1X components are true? (Choo...; Question 13: For your enterprise ISE deployment, you are looking to use c...; Question 14: Which two statements about EVPN are true? (Choose two.)...; Question 15: Which two options are important considerations when you use ...; Question 16: View the Exhibit. (Exhibit) Refer to the exhibit. Which two ...; Question 17: View the Exhibit. (Exhibit) Refer to the exhibit. Which effe...; Question 18: What would describe Cisco Virtual Topology System?...; Question 19: Which two statements about ICMP redirect messages are true? ...; Question 20: Which two statements about role-based access control are tru...; Question 21: Which two statements about Cisco AMP for Web Security are tr...; Question 22: Refer to the exhibit. (Exhibit) R9 is running FLEXVPN with p...; Question 23: Which two statements about Cisco VSG are true? (Choose two.)...; Question 24: All your employees are required to authenticate their device...; Question 25: (Exhibit) Refer to the exhibit. Which two effects of this co...; Question 26: Which statement correctly describes 3DES encryption algorith...; Question 27: Which statement about NMAP scanning on the Cisco Firepower S...; Question 28: A new computer is not getting its IPv6 address assigned by t...; Question 29: Which statement about managing Cisco ISE Guest Services is t...; Question 30: View the Exhibit. (Exhibit) Refer to the exhibit. Which two ...; Question 31: In your corporate environment, you have various Active Direc...; Question 32: Which statement about VRF-aware GDOI group members is true?...; Question 33: (Exhibit) Refer to the exhibit. A customer has opened a case...; Question 34: Refer to the exhibit. (Exhibit) One of the Windows machines ...; Question 35: Which statement describes a pure SDN framework environment?...; Question 36: Which three statements about PKI on Cisco IOS Software are t...; Question 37: Which description of SaaS is true?...; Question 38: The SAML Single Sign-On on ISE is supported by which four po...; Question 39: Which two events can cause a failover event on an active/sta...; Question 40: What are the major components of a Firepower health monitor ...; Question 41: (Exhibit) Refer to the exhibit. What feature must be impleme...; Question 42: On Nexus 9000, in Python interactive mode, which command is ...; Question 43: (Exhibit) Refer to the exhibit. What are two effects of the ...; Question 44: When applying MD5 route authentication on routers running RI...; Question 45: Which statement is true regarding SSL policy implementation ...; Question 46: Witch two statements about ping flood attacks are true? (Cho...; Question 47: Which two statements about NVGRE are true? (Choose two.)...; Question 48: Which three VSA attributes are present in a RADIUS WLAN Acce...; Question 49: Which two statements about SPAN sessions are true? (Choose t...; Question 50: (Exhibit) Refer to the exhibit. What could be the reason of ...; Question 51: Which feature does Cisco VSG use to redirect traffic in a Ci...; Question 52: Which two options are normal functionalities for ICMP? (Choo...; Question 53: Your organization is deploying an ESA for email security for...; Question 54: Which three ESMTP extensions are supported by the Cisco ASA?...; Question 55: In OpenStack, which two statements about the NOVA component ...; Question 56: (Exhibit) Refer to the exhibit. R3 is the Key Server in GETV...; Question 57: View the Exhibit. monitor session 1 source interface gigabit...; Question 58: In which two situations is web authentication appropriate? (...; Question 59: Which two statements about uRPF are true? (Choose two.)...; Question 60: Refer to the exhibit. ASA2 is configured for the Clientless ...; Question 61: A server with IP address 209.165.202.150 is protected behind...; Question 62: View the Exhibit. (Exhibit) Refer to the exhibit. Which leve...; Question 63: Which of the following is part of DevOps Virtuous Cycle?...; Question 64: View the Exhibit. Switch-A (config)# cgmp leave-processing R...; Question 65: Which two options are benefits of network summarization? (Ch...; Question 66: Which three statements about WCCP are true? (Choose three.)...; Question 67: Which three statements about SCEP are true? (Choose three.)...; Question 68: View the Exhibit. (Exhibit) Refer to the exhibit. Which effe...; Question 69: In your ISE design, there are two TACACS profiles that are c...; Question 70: A client computer at 10.10.7.4 is trying to access a Linux s...; Question 71: Which three Cisco attributes for LDAP authorization are supp...; Question 72: If multiple contexts share an ingress interface which would ...; Question 73: Which are two important guidelines to follow when implementi...; Question 74: In your network, you require all guests to authenticate to t...; Question 75: Which two options are unicast address types for IPv6 address...; Question 76: (Exhibit) Refer to the exhibit. What is the effect of the gi...; Question 77: Which two statements about 6to4 tunneling are true? (Choose ...; Question 78: View the Exhibit. (Exhibit) Refer to the exhibit. For which ...; Question 79: Which three authorization technologies does Cisco TrustSec s...; Question 80: What is the best description of a docker file?...; Question 81: Which two statements about MPP (Management Plane Protection)...; Question 82: Your environment has a large number of network devices that ...; Question 83: What are two features that help to mitigate man-in-the-middl...; Question 84: Which three of these are properties of RC4? (Choose three.)...; Question 85: Which three EAP protocols are supported in WPA and WPA2? (Ch...; Question 86: Which of the following correctly describes NVGRE functionali...; Question 87: What are three technologies that can be used to trace the so...; Question 88: Which three statements about SXP are true? (Choose three.)...; Question 89: All your remote users use AnyConnect VPN to connect into you...; Question 90: Which statement is true regarding x.509 certificate?...; Question 91: Which three statements are correct regarding EAP-Chaining? (...; Question 92: Which three statements about the keying methods used by MACS...; Question 93: (Exhibit) Refer to the exhibit. Which two statements about t...; Question 94: Which three types of addresses can the Botnet Traffic Filter...; Question 95: What are two of the valid IPv6 extension headers? (Choose tw...; Question 96: Which command sequence do you enter to add the host 10.2.1.0...; Question 97: In which type of multicast does the Cisco ASA forward IGMP m...; Question 98: Which of the following is AMP Endpoints office engine for wi...; Question 99: Which best practice can limit inbound TTL expiry attacks?...; Question 100: Which statement is correct regarding Cisco VSG functionality...; Question 101: Within Platform as a Service, which two components are manag...; Question 102: Which statement is true about Social Engineering attack?...; Question 103: Which statement about the Cisco AMP Virtual Private Cloud Ap...; Question 104: View the Exhibit. (Exhibit) Refer to the exhibit. Which data...; Question 105: Which statement is true about Dual-Hub DMVPN implementation ...; Question 106: What are the advantages of using LDAP over AD?...; Question 107: Which statement is true regarding securing connection using ...; Question 108: Various methods are available for load-balancing across WSA ...; Question 109: Which three statements about RLDP are true? (Choose three.)...; Question 110: Which option is a data modeling language used to model confi...; Question 111: Which two characteristics of DTLS are true? (Choose two.)...; Question 112: Which three transports have been defined for SNMPv3? (Choose...; Question 113: View the Exhibit. (Exhibit) Refer to the exhibit. What are t...; Question 114: Which of the following is the correct rule with regards to Z...; Question 115: View the Exhibit. %ASA-6-110001: No route to <desr_addres...; Question 116: A network architect has been tasked to mitigate a customer's...; Question 117: Refer to the exhibit. (Exhibit) Firewall ASA1 and router R2 ...; Question 118: Which two options are benefits of the Cisco ASA Identity Fir...; Question 119: AMP for Endpoints is supported on which of these platforms?...; Question 120: Which command on Cisco ASA you can enter to send debug messa...; Question 121: Which statement is true about the traffic substitution and i...; Question 122: An employee using an Android phone on your network has disab...; Question 123: When TCP Intercept is enabled in its default mode, how does ...; Question 124: Which statement currently describes Botnet attack?...; Question 125: (Exhibit) Refer to the exhibit. Which two statements about a...; Question 126: Which of the following is true regarding failover link when ...; Question 127: Which statement is true regarding TLS security protocol?...; Question 128: Which of the following Cisco products gives ability to inter...; Question 129: Which statement is an advantage of network segmentation?...; Question 130: (Exhibit) Refer to the exhibit. R2 is configured as a WCCP r...; Question 131: Which two statements about the TTL value in an IPv4 header a...; Question 132: Which statement is true about VRF-Lite implementation in a s...; Question 133: What are the two most common methods that security auditors ...; Question 134: From the list below, which one is the major benefit of AMP T...; Question 135: Which of the following is one of the requirements for the FT...; Question 136: What are the three scanning engines that the Cisco IronPort ...; Question 137: A user attempts to browse the Internet through a CWS-integra...; Question 138: Which connection mechanism does the eSTREAMER service use to...; Question 139: What is the purpose of the BGP TTL security check?...; Question 140: What IOS feature can prevent header attacks by using packet-...; Question 141: Which of the following is the correct statement regarding en...; Question 142: (Exhibit) Refer to the exhibit. Destination address with nam...; Question 143: Which statement is correct regarding the SenderBase function...; Question 144: Which statement about SenderBase reputation scoring on an ES...; Question 145: (Exhibit) There is no ICMP connectivity from VPN_PC to Serve...; Question 146: What are the three configurations in which SSL VPN can be im...; Question 147: What are three features that are enabled by generating Chang...; Question 148: Which two statements about Cisco AnyConnect VPN Client are t...; Question 149: Which statement is true regarding Private VLAN?...; Question 150: Which four task items need to be performed for an effective ...; Question 151: Which two statements about a wireless access point configure...; Question 152: Which three statements about VRF-Aware Cisco Firewall are tr...; Question 153: Which of the following is a correct operational statement of...; Question 154: Which statement is correct regarding password encryption and...

[×]

Download PDF File

Enter your email address to download Cisco.400-251.v2018-12-10.q154.pdf

Email:

Disclaimer:
Freecram doesn't offer Real GIAC Exam Questions. Freecram doesn't offer Real SAP Exam Questions. Freecram doesn't offer Real (ISC)² Exam Questions. Freecram doesn't offer Real CompTIA Exam Questions. Freecram doesn't offer Real Microsoft Exam Questions.
Oracle and Java are registered trademarks of Oracle and/or its affiliates.
Freecram material do not contain actual actual Oracle Exam Questions or material.
Microsoft®, Azure®, Windows®, Windows Vista®, and the Windows logo are registered trademarks of Microsoft Corporation.
Freecram Materials do not contain actual questions and answers from Cisco's Certification Exams. The brand Cisco is a registered trademark of CISCO, Inc.
CFA Institute does not endorse, promote or warrant the accuracy or quality of these questions. CFA® and Chartered Financial Analyst® are registered trademarks owned by CFA Institute.
Freecram does not offer exam dumps or questions from actual exams. We offer learning material and practice tests created by subject matter experts to assist and help learners prepare for those exams. All certification brands used on the website are owned by the respective brand owners. Freecram does not own or claim any ownership on any of the brands.

Question 122/154

LEAVE A REPLY

Download PDF File