Under which Junos hierarchy level are security policies configured?（）A、[edit security]B、[edit protocols]C、[edit firewall]D、[edit policy-options]

第1题：

第2题：

第3题：

第4题：

Which action change the default editor for ALL users on the system from vi to edit（）

• A、Issue the command： export EDITOR=/usr/bin/edit edit each user .profile to change the EDITOR value to /usr/bin/edit
• B、Modify /.profile and change the EDITOR variable to /usr/bin/edit
• C、Modify /etc/environment and add EDITOR=/usr/bin/edit export EDITOR
• D、Modify /etc/security/defaults and change the EDITOR value to /usr/bin/edit

正确答案:C

第5题：

You want to allow your device to establish OSPF adjacencies with a neighboring device connected tointerface ge-0/0/3.0. Interface ge-0/0/3.0 is a member of the HR zone.Under which configuration hierarchy must you permit OSPF traffic？（）

• A、[edit security policies from-zone HR to-zone HR]
• B、[edit security zones functional-zone management protocols]
• C、[edit security zones protocol-zone HR host-inbound-traffic]
• D、[edit security zones security-zone HR host-inbound-traffic protocols]

正确答案:D

第6题：

In which hierarchy are routing policies defined?（）

• A、[edit policy-options]
• B、[edit routing-options]
• C、[edit forwarding-options]
• D、[edit protocols]

正确答案:A

第7题：

You want to allow all hosts on interface ge-0/0/0.0 to be able to ping the device’s ge-0/0/0.0 IP address.Where do you configure this functionality？（）

• A、[edit interfaces]
• B、[edit security zones]
• C、[edit system services]
• D、[edit security interfaces]

正确答案:B

第8题：

You are modifying the default route preference under the [edit protocols] hierarchy. In which two routing information sources can you change the default preference value?（）

• A、local
• B、OSPF
• C、direct
• D、BGP

正确答案:B,D

第9题：

Which command at the [edit protocols isis] hierarchy level forces routed traffic to avoid this router？（）

• A、metric 64
• B、overload
• C、priority 0
• D、te-metric 32768

正确答案:B

第10题：

第11题：

第12题：

第13题：

第14题：

第15题：

You want to test a configured screen value prior to deploying.Which statement will allow you to accomplish this?（）

• A、[edit security screen] user@host# show ids-option untrust-screen { alarm-test-only; }
• B、[edit security screen] user@host# show ids-option untrust-screen { alarm-without-drop; }
• C、[edit security screen] user@host# show ids-option untrust-screen { alarm-no-drop; }
• D、[edit security screen] user@host# show ids-option untrust-screen { test-without-drop; }

正确答案:B

第16题：

A  user  wants  to  be  permanently  added  to  the  dba  group.  Which  of  the  following  commands  or processes can be used to accomplish this（）

• A、chgrp
• B、chuser
• C、edit /etc/user
• D、edit /etc/security/group

正确答案:B

第17题：

Under which configuration hierarchy is an access profile configured for firewall user authentication？（）

• A、[edit access]
• B、[edit security access]
• C、[edit firewall access]
• D、[edit firewall-authentication]

正确答案:A

第18题：

Your task is to provision the Junos security platform to permit transit packets from the Private zone to the External zone by using an IPsec VPN and log information at the time of session close.Which configuration meets this requirement?（）

• A、[edit security policies from-zone Private to-zone External] user@host# show policy allowTransit { match { source-address PrivateHosts;destination-address ExtServers; application ExtApps; } then { permit { tunnel { ipsec-vpn VPN; } } log { session-init; } } }
• B、[edit security policies from-zone Private to-zone External] user@host# show policy allowTransit { match { source-address PrivateHosts; destination-address ExtServers; application ExtApps; } then { permit { tunnel { ipsec-vpn VPN; } } count { session-close; } } }
• C、[edit security policies from-zone Private to-zone External] user@host# showpolicy allowTransit { match { source-address PrivateHosts; destination-address ExtServers; application ExtApps; } then { permit { tunnel { ipsec-vpn VPN;} } log { session-close; } } }
• D、[edit security policies from-zone Private to-zone External] user@host# show policy allowTransit { match { source-address PrivateHosts; destination-address ExtServers; application ExtApps; } then { permit { tunnel { ipsec-vpn VPN; log; count session-close; } } } }

正确答案:C

第19题：

At which two levels of the Junos CLI hierarchy is the host-inbound-traffic command configured? （）(Choose two.)

• A、[edit security idp]
• B、[edit security zones security-zone trust interfaces ge-0/0/0.0]
• C、[edit security zones security-zone trust]
• D、[edit security screen]

正确答案:B,C

第20题：

You are required to configure a SCREEN option that enables IP source route option detection.Which twoconfigurations meet this requirement?（） (Choose two.)

• A、[edit security screen] user@host# show ids-option protectFromFlood { ip { loose-source-route-option; strict-source-route-option; } }
• B、[edit security screen] user@host# show ids-option protectFromFlood { ip { source-route-option; } }
• C、[edit security screen] user@host# show ids-option protectFromFlood { ip { record-route-option; security-option; } }
• D、[edit security screen] user@host# show ids-option protectFromFlood { ip { strict-source-route-option; record-route-option; } }

正确答案:A,B

第21题：

第22题：

第23题：