Cisco CCIE Security Written Exam (v5.0) (400-251) Free Practice Test
Question 1
Cisco ISE can assign a VLAN as a result of an 802.1x authentication and authorization request. What does the switch do if the VLAN assigned by ISE does not exist?
Correct Answer: D
Question 2
In order to enable the Certificate Authority (CA) server feature using Simple Certificate Enrolment Protocol (SCEP) on an IOS device, which three of the following configuration steps are required? (Choose three.)
Correct Answer: A,E,F
Question 3
Which three messages are part of the SSL protocol? (Choose three)
Correct Answer: B,F,H
Question 4
Which three protocols are used by the management plane in a Cisco IOS device? (Choose three)
Correct Answer: A,H,I
Question 5
What us the most common IoT threat vector?
Correct Answer: C
Question 6
Which three of the following statements are true about the Security Group Tag (SGT)? (Choose three)
Correct Answer: A,B,E
Question 7
Which statement is true regarding the failover link when ASAs are configured in a failover mode?
Correct Answer: A
Question 8
Which statement about password encryption and integrity on a Cisco IOS device is true?
Correct Answer: B