多选题下列哪些命令不能查看Eudemon防火墙的会话表项内容（）。Adisplays ession tableBdisplay firewall session tableCdisplay firewall session contentDdisplay firewall session

第1题：

在Eudemon1000防火墙中，查看当前的会话表项总数量，可以用如下的命令（）。

• A、display firewall statistic system
• B、display firewall statistic system normal
• C、display firewall session
• D、display firewall session normal

第2题：

下列哪些命令不能查看Eudemon防火墙的会话表项内容（）。

• A、displays ession table
• B、display firewall session table
• C、display firewall session content
• D、display firewall session

第3题：

查看SecPath防火墙会话的命令是（）。

• A、display firewall session table
• B、display firewall session
• C、display session table
• D、display aspf session

第4题：

ession对象的（）方法用于设置会话的超时时间。

• A、session.setAttribute（“time”，30）；
• B、session.setMaxTime（30）；
• C、session.getMaxInactiveInterval（）；
• D、session.setMaxInactiveInterval（30）；

第5题：

Two routers configured to run BGP have been connected to a firewall， one on the inside interface and one on the outside interface. BGP has been configured so the two routers should peer， including the correct BGP session endpoint addresses and the correct BGP session hop-count limit （EBGP multihop）. What is a good first test to see if BGP will work across the firewall？（）

• A、Attempt to TELNET from the router connected to the inside of the firewall to the router connected to the outside of the firewall. If telnet works， BGP will work， since telnet and BGP both use TCP to transport data.
• B、Ping from the router connected to the inside interface of the firewall to the router connected to the outside interface of the firewall. If you can ping between them， BGP should work， since BGP uses IP to transport packets.
• C、There is no way to make BGP work across a firewall without special configuration， so there is no simple test that will show you if BGP will work or not， other than trying to start the peering session.
• D、There is no way to make BGP work across a firewall.

第6题：

Two routers configured to run BGP have been connected to a firewall，one on the inside interface and one on the outside interface. BGP has been configured so the two routers should peer，including the correct BGP session endpoint addresses and the correct BGP session hop-count limit （EBGP multihop）. What is a good first test to see if BGP will work across the firewall？（）

• A、Attempt to TELNET from the router connected to the inside of the firewall to the router connected to the outside of the firewall.If telnet works，BGP will work，since telnet and BGP both use TCP to transport data
• B、Ping from the router connected to the inside interface of the firewall to the router connected to the outside interface of the firewall.If you can ping between them，BGP should work，since BGP uses IP to transport packets
• C、There is no way to make BGP work across a firewall without special configuration，so there is no simple test that will show you if BGP will work or not，other than trying to start the peering session
• D、There is no way to make BGP work across a firewall

第7题：

Given the configuration shown in the exhibit， which configuration object would be used to associate bothNancy and Walter with firewall user authentication within a security policy？（） profile ftp-users { client nancy { firewall-user { password "$9$lJ8vLNdVYZUHKMi.PfzFcyrvX7"； ## SECRET-DATA } } client walter { firewall-user { password "$9$a1UqfTQnApB36pBREKv4aJUk.5QF"； ## SECRET-DATA } } session-options { client-group ftp-group； } } firewall-authentication { pass-through { default-profile ftp-users；ftp { banner { login "JUNOS Rocks!"； } } } }

• A、ftp-group
• B、ftp-users
• C、firewall-user
• D、nancy and walter

第8题：

Your company has an Active Directory Domain Services (AD DS) domain. All servers run Wind ows Server 2008 R2. All client computers run Windows 7. You have a Remote Desktop Session Host (RD Session Host) server and a Remote Desktop Gateway (RD Gateway) server. You use Windows Firewall on your servers. You need to ensure that users can connect to their virtual desktops. What should you do?（）

• A、Create a Windows Firewall inbound rule for port 443 on the RD Gateway server.
• B、Create a Windows Firewall inbound rule for port 443 on the RD Se ssion Host server.
• C、Create a Windows Firewall inbound rule for port 3389 on the RD Gateway server.
• D、Create a Windows Firewall inbound rule for port 3389 on the RD Session Host server.

第9题：

Your company has an Active Directory Domain Services (AD DS) domain. All servers run Windows Server 2008 R2. All client computers run Windows 7. You have a Remote Desktop Session Host (RD Session Host) server and a Remote Desktop Gateway (RD Gateway) server. You use Windows Firewall on your servers. You need to ensure that users can connect to their virtual desktops. What should you do？（）

• A、Create a Windows Firewall inbound rule for port 443 on the RD Gateway server.
• B、Create a Windows Firewall inbound rule for port 443 on the RD Session Host server.
• C、Create a Windows Firewall inbound rule for port 3389 on the RD Gateway server.
• D、Create a Windows Firewall inbound rule for port 3389 on the RD Session Host server.

第10题：

第11题：

第12题：

第13题：

On the Catalyst 6500 Series switch, which command is used to establish a console connection to the Firewall Services Module?（）

• A、ssh
• B、connect
• C、login
• D、session

第14题：

使用（）命令查看NAT表项。

• A、display nat table
• B、display nat entry
• C、display nat
• D、display nat session

第15题：

双机热备组网中，主备防火墙会备份下面哪些信息？（）

• A、防火墙业务配置
• B、NAT session
• C、ASPF session
• D、动态黑名单
• E、Firewall session table
• F、静态路由

第16题：

双机热备组网中，主备防火墙会备份下面哪些信息？（）

• A、防火墙业务配置
• B、NATsession
• C、ASPFsession
• D、动态黑名单
• E、Firewall session table
• F、静态路由

第17题：

You work as a network engineer for the company， you want to configure two BGP speakers to form an EBGP session across a firewall. On the engineer’s network， the firewall always permits TCP sessions that are initiated from the inside network （the network attached to the inside interface of the firewall）. What prerequisite is there for enabling BGP to run on this network？（）

• A、EBGP multihop will need to be configured for this to work.
• B、This should work with normal BGP peering， with no additional configuration on the BGP speakers or the firewall.
• C、The BGP protocol port must be opened on the firewall
• D、There is no way to make BGP work across a firewall.

第18题：

What are three valid match criteria in a firewall filter applied to a Layer 3 interface?（）

• A、IP address
• B、MAC address
• C、protocol
• D、port
• E、session ID

第19题：

Which statement accurately describes firewall user authentication？（）

• A、Firewall user authentication provides another layer of security in a network.
• B、Firewall user authentication provides a means for accessing a JUNOS Software-based security device.
• C、Firewall user authentication enables session-based forwarding.
• D、Firewall user authentication is used as a last resort security method in a network.

第20题：

Your company runs Remote Desktop Services. All client computers run Windows XP SP3. You have a Remote Desktop Session Host (RD Session Host) server. You need to ensure that users c an print by using Easy Print while connected to the RD Session Host server. What should you do on the client computers?（）

• A、Install .NET Framework 3.5.
• B、Enable Network Level Authentication (NLA)
• C、Enable a Windows Firewall Inbound Rule for File and Printer  Sharing.
• D、Enable a Windows Firewall Outbound Rule for File and Printer Sharing.

第21题：

第22题：

第23题：