多选题Which two statements are correct regarding units in JUNOS?（）AUnits in JUNOS are always required for any interface configured with logical addresses such as IP and IPv6.BUnits in JUNOS are only required when you are configuring sub-interfaces for inter-

第1题：

In JUNOS software， which type of encapsulation is required on a PE router for the CE-facing interface in a Martini-based VPN？（）

• A、ATM
• B、CCC
• C、HDLC
• D、Ethernet

第2题：

Which two statements are true regarding firewall user authentication?（） (Choose two.)

• A、When configured for pass-through firewall user authentication, the user must first open a connection to the Junos security remote network resource.
• B、When configured for Web firewall user authentication only, the user must first open a connection to the Junos security remote network resource.
• C、If a Junos security device is configured for pass-through firewall user authentication, new sessions are automatically intercepted .
• D、If a Junos security device is configured for Web firewall user authentication, new sessions are automatically intercepted.

第3题：

Which two statements regarding JUNOS architecture are correct?（）

• A、The Routing Engine handles all exception traffic.
• B、The Routing Engine synchronizes the route table with the PFE
• C、The Routing Engine is hot-pluggable.
• D、The Routing Engine controls the PFE

第4题：

Which two statements are correct regarding units in JUNOS?（）

• A、Units in JUNOS are always required for any interface configured with logical addresses such as IP and IPv6.
• B、Units in JUNOS are only required when you are configuring sub-interfaces for inter-VLAN routing.
• C、Unit numbers must match the DLCI or VCI numbers configured on the interface.
• D、Unit 0 is the only value allowed on interfaces running HDLC, PPP, or for Ethernet interfaces not doing VLAN-tagging.

第5题：

Which three statements are true when working with high-availability clusters？（）

• A、The valid cluster-id range is between 0 and 255.
• B、JUNOS security devices can belong to more than one cluster if cluster virtualization is enabled.
• C、If the cluster-id value is set to 0 on a JUNOS security device， the device will not participate in the cluster.
• D、A reboot is required if the cluster-id or node value is changed.
• E、JUNOS security devices can belong to one cluster only.

第6题：

Which two statements are true regarding firewall user authentication？（）

• A、When configured for pass-through firewall user authentication， the user must first open a connection to the JUNOS security platform before connecting to a remote network resource.
• B、When configured for Web firewall user authentication only， the user must first open a connection to the JUNOS security platform before connecting to a remote network resource.
• C、If a JUNOS security device is configured for pass-through firewall user authentication， new sessions are automatically intercepted to perform authentication.
• D、If a JUNOS security device is configured for Web firewall user authentication， new sessions are automatically intercepted to perform authentication.

第7题：

A customer wants to create a custom Junos Pulse configuration. Which two are required?（）

• A、Connection set
• B、Configuration set
• C、Custom installer
• D、Component set

第8题：

第9题：

第10题：

第11题：

第12题：

第13题：

Which statement is true about interface-based source NAT？（）

• A、PAT is a requirement.
• B、It requires you to configure address entries in the junos-nat zone.
• C、It requires you to configure address entries in the junos-global zone.
• D、The IP addresses being translated must be in the same subnet as the egress interface.

第14题：

Which statement is true regarding the Junos OS?（）

• A、The Junos kernel is based on the Solaris operating sytem
• B、The Junos kernel is based on the GNU Zebra operating system
• C、The Junos kernel is completely original and not based on any other operating system
• D、The Junos kernel is based on the FreeBSD UNIX operating system

第15题：

Which statement is correct about logical units on Juniper Router interfaces?（）

• A、Logical units are used only when a Layer 2 identifier is present such as a VLAN
• B、A logical unit of 0 is required when using a frame-relay DLCI
• C、A logical unit is always required
• D、Logical units are not required unless ATM or 802.1Q VLAN tagging is configured.

第16题：

Which two statements about JUNOS Software packet handling are correct？（）

• A、JUNOS Software applies service ALGs only for the first packet of a flow.
• B、JUNOS Software uses fast-path processing only for the first packet of a flow.
• C、JUNOS Software performs route and policy lookup only for the first packet of a flow.
• D、JUNOS Software applies SCREEN options for both first and consecutive packets of a flow.

第17题：

Which two statements are true regarding proxy ARP？（）

• A、Proxy ARP is enabled by default.
• B、Proxy ARP is not enabled by default.
• C、JUNOS security devices can forward ARP requests to a remote device when proxy ARP is enabled.
• D、JUNOS security devices can reply to ARP requests intended for a remote device when proxy ARP is enabled

第18题：

Which statement is true about interface-based static NAT? （）

• A、It also supports PAT.
• B、It requires you to configure address entries in the junos-nat zone.
• C、It requires you to configure address entries in the junos-global zone.
• D、The IP addresses being translated must be in the same subnet as the incoming interface.

第19题：

Which statement is correct regarding the Junos OS?（）

• A、The same Junos OS image is used on all Junos devices.
• B、The Junos OS provides separation between the control and forwarding planes.
• C、Each Junos OS image is based on model-specific source code.
• D、The Junos OS creates a secondary instance of the kernel to ensure redundancy.

第20题：

第21题：

第22题：

第23题：