400-251 試験問題を無料オンラインアクセス

Which is true regarding Authentication Proxy?

• A.It does not apply the DACL for the traffic passing through the device
• B.It applies a global ACL If the user authentication information not found
• C.It triggers only on HTTP connection
• D.It prompts user with a web-based authentication if user authentication information found
• E.It first checks if the NAT entry exists for the destination host
• F.It triggers on HTTP, HTTPS and FTP connections

What are the four possible options for authorization condition NetwockAccess EAPChainingResult? (Choose Four)

• A.User and NAD both failed
• B.User failed and machine succeeded
• C.User succeeded and NAD failed
• D.User and machine both failed
• E.User and NAD both succeeded
• F.User succeeded and machine failed
• G.User and machine both succeeded
• H.User failed NAD succeeded

Which of the following IOS IPsec transform-set configuration provides both encryption and integrity protection?

• A.esp-gcm 128
• B.esp-gmac 128
• C.esp-sha256-hmac
• D.esp-sha512-hmac
• E.esp-aes 256

Windows supplicant connected to SW2 cannot establish HTTP session using FQDN. Based on the provided outputs, what could be the potential issue?

• A.User is not Authorized
• B.MAB should be used for port authentication and authorization
• C.Issue with assigned VLAN to the session
• D.User is not authenticated
• E.Issue with the DACL pushed for the session
• F.Issue with assigned SGT to the sessions

Which statement about x 509 certificates is true?

• A.The algorithm in the certificate is used by the receiver to sign the certificate
• B.The Issuer distinguished name in the certificate is of the entity receiving the certificate
• C.The Subject distinguished name in the certificate is of the entity who issued the certificate
• D.The serial number in the certificate is common across the certificates issued by the same CA
• E.The version number in the certificate is x 509 version number
• F.The algorithm in the certificate is used by the subject to encrypt the traffic