单选题You have a MAG Series device with IP address 10.0.1.5 and hostname ad .pulse.local acting as an IF-MAP Federation server. The subject name of the device certificate on this server is ad .pulse.local.Which server URL must you configure on the IF-MAP cli

题目
单选题
You have a MAG Series device with IP address 10.0.1.5 and hostname ad .pulse.local acting as an IF-MAP Federation server. The subject name of the device certificate on this server is ad .pulse.local.Which server URL must you configure on the IF-MAP clients communicating with this IF-MAP Federation server?（）
A

https://acl.pulse.local/dana-ws/soap/dsifmap

B

http://acl.pulse.local/dana-ws/soap/dsifmap

C

https://acl/dana-ws/soap/dsifmap

D

http://10.0.1.5/dana-ws/soap/dsifmap

相似考题

1.Interface ge-0/0/2.0 of your device is attached to the Internet and is configured with an IP address and network mask of 71.33.252.17/24. A Web server with IP address 10.20.20.1 is running an HTTP service on TCP port 8080. The Web server is attached to the ge-0/0/0.0 interface of your device. You must use NAT to make the Web server reachable from the Internet using port translation.Which type of NAT must you configure?（）A. source NAT with address shiftingB. pool-based source NATC. static destination NATD. pool-based destination NAT

2.You have configured the Odyssey Access Client with a profile which has the "Disable Server Verification" setting cleared.What will be the result if the device certificate on the MAG Series device has expired and the user attempts to authenticate?（）A. The user will be instructed to call the network administrator.B. The user will fail authentication.C. The user will be prompted to install a new device certificate on the MAG Series device.D. The user will successfully authenticate and have full network access.

3. Interface ge-0/0/2.0 of your device is attached to the Internet and is configured with an IP address and network mask of 71.33.252.17/24. A Web server with IP address 10.20.20.1 is running an HTTP service on TCP port 8080. The Web server is attached to the ge-0/0/0.0 interface of your device. You must use NAT to make the Web server reachable from the Internet using port translation. Which type of NAT must you configure?（）A、source NAT with address shiftingB、pool-based source NATC、static destination NATD、pool-based destination NAT

4.You have a MAG Series device with IP address 10.0.1.5 and hostname ad .pulse.local acting as an IF-MAP Federation server. The subject name of the device certificate on this server is ad .pulse.local.Which server URL must you configure on the IF-MAP clients communicating with this IF-MAP Federation server?（）A. https://acl.pulse.local/dana-ws/soap/dsifmapB. http://acl.pulse.local/dana-ws/soap/dsifmapC. https://acl/dana-ws/soap/dsifmapD. http://10.0.1.5/dana-ws/soap/dsifmap

更多“单选题You have a MAG Series device with IP address 10.0.1.5 and hostname ad .pulse.local acting as an IF-MAP Federation server. The subject name of the device certificate on this server is ad .pulse.local.Which server URL must you configure on the IF-MAP cli”相关问题

  • 第1题：

    You are the administrator of a Windows 2000 network. You install Windows 2000 Professional on a new computer and configure the TCP/IP settings to have a static IP address. While testing network connectivity from the new computer, you discover an error in the DNS server address that is configured in the TCP/IP settings. You configure the correct DNS server address, which is 10.1.1.5. However, you are still unable to successfully connect to network resources by name. You run the IPconfig/all command. The results indicate that the DNS server address is now configured as 0.0.0.0 You need to ensure that the computer can connect to network resources by name. What should you do?（）

    • A、Stop and restart the DNS Client service.
    • B、Add 10.1.1.5 to the DNS server list on the TCP/IP Advanced Properties tab.
    • C、Add an A （host） record for the computer to the DNS server’s zone file.
    • D、Configure your DHCP server to have a DNS server address of 10.1.1.5.

    正确答案:A

  • 第2题：

    You are an administrator of an active/passive cluster of MAG Series devices running in mixed- mode configuration (IF-MAP server and authenticating users). The active user count is quickly approaching the maximum limit of the cluster. You have been directed to reconfigure the cluster to an active/active cluster and add a new license to increase the total number of active users the cluster can support. What must you do before changing the cluster configuration?（）

    • A、Apply the new license to the passive node of the cluster.
    • B、Configure an external load balancer to hold the V IP.
    • C、Disable the active node in the cluster.
    • D、Remove the IF-MAP server configuration.

    正确答案:D

  • 第3题：

    You are performing the initial setup of a new MAG Series device and have installed a valid CA- signed certificate on the MAG Series device. Connectivity to an existing SRX Series firewall enforcer cannot be obtained.What are two explanations for this behavior?（）

    • A、The MAG Series device has multiple ports associated with the certificate.
    • B、The MAG Series device's serial number needs to be configured on the SRX Series device.
    • C、The SRX Series device must have a certificate signed by the same authority as the MAG Series device.
    • D、The MAG Series device and SRX Series device are not synchronized to an NTP server.

    正确答案:C,D

  • 第4题：

    Cer-tech .com has a server that runs Windows Server 2008. You have installed the Web Server （IIS） roleon it. Cer-tech plans to host multiple websites on the server. To achieve this you configure a single IPaddress on the server. You also configure all websites to be registered in DNS to point to the single IP address configured on the server. You have to make sure that each and every website responds only to thename requests from all client machines. What should you do to achieve this task？（）

    • A、Configure the primary and secondary DNS to point to the server’s IP address
    • B、Configure a network address for each website
    • C、Assign a unique port for each website
    • D、Configure and assign a unique Host Header to each website

    正确答案:D

  • 第5题：

    You deploy a new Active Directory Federation Services （AD FS） federation server.   You request new certificates for the AD FS federation server.   You need to ensure that the AD FS federation server can use the new certificates.   To which certificate store should you import the certificates（）

    • A、Computer
    • B、IIS Admin Service service account
    • C、Local Administrator
    • D、World Wide Web Publishing Service service account

    正确答案:A

  • 第6题：

    You have a server that runs Windows Server 2008. The Web Server （IIS） role is installed.  You plan to host multiple Web sites on the server. You configure a single IP address for the server. All Web sites are registered in DNS to point to the single IP address.  You need to ensure that each Web site only responds to requests by name from all client computers.  What should you do？（）

    • A、Configue a unique port for each Web site.
    • B、Configue a unique IP address for each Web site.
    • C、Configue a unique Host Header for each Web site.
    • D、Edit the Hosts file on the server to add all the Web site names associated to the network address.

    正确答案:C

  • 第7题：

    单选题
    You deploy a new Active Directory Federation Services （AD FS） federation server.   You request new certificates for the AD FS federation server.   You need to ensure that the AD FS federation server can use the new certificates.   To which certificate store should you import the certificates（）
    A

    Computer

    B

    IIS Admin Service service account

    C

    Local Administrator

    D

    World Wide Web Publishing Service service account


    正确答案： C
    解析： 暂无解析

  • 第8题：

    单选题
    Cer-tech .com has a server that runs Windows Server 2008. You have installed the Web Server （IIS） roleon it. Cer-tech plans to host multiple websites on the server. To achieve this you configure a single IPaddress on the server. You also configure all websites to be registered in DNS to point to the single IP address configured on the server. You have to make sure that each and every website responds only to thename requests from all client machines. What should you do to achieve this task？（）
    A

    Configure the primary and secondary DNS to point to the server’s IP address

    B

    Configure a network address for each website

    C

    Assign a unique port for each website

    D

    Configure and assign a unique Host Header to each website


    正确答案： A
    解析： 暂无解析

  • 第9题：

    单选题
    You have configured the Odyssey Access Client with a profile which has the "Disable Server Verification" setting cleared.What will be the result if the device certificate on the MAG Series device has expired and the user attempts to authenticate?（）
    A

    The user will be instructed to call the network administrator.

    B

    The user will fail authentication.

    C

    The user will be prompted to install a new device certificate on the MAG Series device.

    D

    The user will successfully authenticate and have full network access.


    正确答案： A
    解析： 暂无解析

  • 第10题：

    单选题
    As an administrator at Certkiller.com， you have installed an Active Directory forest that has a single domain. You have installed an Active Directory Federation services （AD FS） on the domain member server.  What should you do to configure AD FS to make sure that AD FS token contains information from the active directory domain（）
    A

    Add a new account store and configure it.

    B

    Add a new resource partner and configure it

    C

    Add a new resource store and configure it

    D

    Add a new administrator account on AD FS and configure it

    E

    None of the above


    正确答案： E
    解析： 暂无解析

  • 第11题：

    单选题
    Interface ge-0/0/2.0 of your device is attached to the Internet and is configured with an IP address and network mask of 71.33.252.17/24. A Web server with IP address 10.20.20.1 is running an HTTP service on TCP port 8080. The Web server is attached to the ge-0/0/0.0 interface of your device. You must use NAT to make the Web server reachable from the Internet using port translation. Which type of NAT must you configure?（）
    A

    source NAT with address shifting

    B

    pool-based source NAT

    C

    static destination NAT

    D

    pool-based destination NAT


    正确答案： C
    解析： 暂无解析

  • 第12题：

    单选题
    You are an administrator of an active/passive cluster of MAG Series devices running in mixed- mode configuration (IF-MAP server and authenticating users). The active user count is quickly approaching the maximum limit of the cluster. You have been directed to reconfigure the cluster to an active/active cluster and add a new license to increase the total number of active users the cluster can support. What must you do before changing the cluster configuration?（）
    A

    Apply the new license to the passive node of the cluster.

    B

    Configure an external load balancer to hold the V IP.

    C

    Disable the active node in the cluster.

    D

    Remove the IF-MAP server configuration.


    正确答案： B
    解析： 暂无解析

  • 第13题：

    You are installing a MAG Series device for access control using an SRX Series device as the firewall enforcer. The MAG Series device resides in the same security zone as users. However, the users reside in different subnets and use the SRX Series device as an IP gateway.Which statement is true?（）

    • A、You must configure a security policy on the SRX Series device to allow traffic to flow from the user devices to the MAG Series device.
    • B、No security policy is necessary on the SRX Series device to allow traffic to flow from the user devices to the MAG Series device.
    • C、You must configure host-inbound traffic on the SRX Series device to allow SSL traffic between the MAG Series device and the user devices.
    • D、You must configure host-inbound traffic on the SRX Series device to allow EAP traffic between the MAG Series device and the user devices.

    正确答案:A

  • 第14题：

    You have a MAG Series device with IP address 10.0.1.5 and hostname ad .pulse.local acting as an IF-MAP Federation server. The subject name of the device certificate on this server is ad .pulse.local.Which server URL must you configure on the IF-MAP clients communicating with this IF-MAP Federation server?（）

    • A、https://acl.pulse.local/dana-ws/soap/dsifmap
    • B、http://acl.pulse.local/dana-ws/soap/dsifmap
    • C、https://acl/dana-ws/soap/dsifmap
    • D、http://10.0.1.5/dana-ws/soap/dsifmap

    正确答案:A

  • 第15题：

    You have a VPN server that runs Windows Server 2003 Service Pack 2 (SP2). The VPN server is configured to have a static IP address pool. The IP address range is 10.10.10.1 to 10.10.10.200.All clients connect to the server by using PPTP. You discover that the VPN server supports only five concurrent VPN connections. You need to ensure that the VPN server supports 100 concurrent VPN connections. What should you do?（） 

    • A、From Network Interfaces, create a new demand-dial interface. 
    • B、From the properties of the server, disable multilink connections. 
    • C、From the port properties, configure the WAN Miniport (PPTP) device. 
    • D、From the properties of the server, configure the IP address assignment settings. 

    正确答案:C

  • 第16题：

    You have an Active Directory forest named contoso.com.You install a new Exchange Server 2010 organization that contains a Client Access server named CAS1.You need to configure certificates in the organization to support the following client connections：  （1）Autodiscover  （2）Outlook Anywhere  （3）Exchange ActiveSync  What should you do？（）

    • A、Reissue a self-signed certificate to CAS1.
    • B、Configure the default Web site on CAS1 to require SSL.
    • C、Issue a trusted certificate that contains multiple subject alternate names.
    • D、Install Active Directory Rights Management Service （AD RMS） on a member server.

    正确答案:C

  • 第17题：

    As an administrator at Certkiller.com， you have installed an Active Directory forest that has a single domain. You have installed an Active Directory Federation services （AD FS） on the domain member server.  What should you do to configure AD FS to make sure that AD FS token contains information from the active directory domain（）

    • A、Add a new account store and configure it.
    • B、Add a new resource partner and configure it
    • C、Add a new resource store and configure it
    • D、Add a new administrator account on AD FS and configure it
    • E、None of the above

    正确答案:A

  • 第18题：

    单选题
    You deploy an Active Directory Federation Services （AD FS） Federation Service Proxy on a server  named Server1.   You need to configure the Windows Firewall on Server1 to allow external users to authenticate by using  AD FS.   Which inbound TCP port should you allow on Server1（）
    A

    88

    B

    135

    C

    443

    D

    445


    正确答案： A
    解析： 暂无解析

  • 第19题：

    多选题
    You are performing the initial setup of a new MAG Series device and have installed a valid CA- signed certificate on the MAG Series device. Connectivity to an existing SRX Series firewall enforcer cannot be obtained.What are two explanations for this behavior?（）
    A

    The MAG Series device has multiple ports associated with the certificate.

    B

    The MAG Series device's serial number needs to be configured on the SRX Series device.

    C

    The SRX Series device must have a certificate signed by the same authority as the MAG Series device.

    D

    The MAG Series device and SRX Series device are not synchronized to an NTP server.


    正确答案： A,C
    解析： 暂无解析

  • 第20题：

    单选题
    You are installing a MAG Series device for access control using an SRX Series device as the firewall enforcer. The MAG Series device resides in the same security zone as users. However, the users reside in different subnets and use the SRX Series device as an IP gateway.Which statement is true?（）
    A

    You must configure a security policy on the SRX Series device to allow traffic to flow from the user devices to the MAG Series device.

    B

    No security policy is necessary on the SRX Series device to allow traffic to flow from the user devices to the MAG Series device.

    C

    You must configure host-inbound traffic on the SRX Series device to allow SSL traffic between the MAG Series device and the user devices.

    D

    You must configure host-inbound traffic on the SRX Series device to allow EAP traffic between the MAG Series device and the user devices.


    正确答案： C
    解析： 暂无解析

  • 第21题：

    单选题
    You have a VPN server that runs Windows Server 2003 Service Pack 2 (SP2). The VPN server is configured to have a static IP address pool. The IP address range is 10.10.10.1 to 10.10.10.200. All clients connect to the server by using PPTP. You discover that the VPN server supports only five concurrent VPN connections. You need to ensure that the VPN server supports 100 concurrent VPN connections.  What should you do?（）
    A

    From Network Interfaces， create a new demand-dial interface.

    B

    From the properties of the server， disable multilink connections.

    C

    From the port properties， configure the WAN Miniport （PPTP） device.

    D

    From the properties of the server， configure the IP address assignment settings.


    正确答案： C
    解析： 暂无解析

  • 第22题：

    单选题
    You have a server that runs Windows Server 2008. The Web Server （IIS） role is installed.  You plan to host multiple Web sites on the server. You configure a single IP address for the server. All Web sites are registered in DNS to point to the single IP address.  You need to ensure that each Web site only responds to requests by name from all client computers.  What should you do？（）
    A

    Configue a unique port for each Web site.

    B

    Configue a unique IP address for each Web site.

    C

    Configue a unique Host Header for each Web site.

    D

    Edit the Hosts file on the server to add all the Web site names associated to the network address.


    正确答案： D
    解析： 暂无解析

  • 第23题：

    单选题
    You are the administrator of a Windows 2000 network. You install Windows 2000 Professional on a new computer and configure the TCP/IP settings to have a static IP address. While testing network connectivity from the new computer, you discover an error in the DNS server address that is configured in the TCP/IP settings. You configure the correct DNS server address, which is 10.1.1.5. However, you are still unable to successfully connect to network resources by name. You run the IPconfig/all command. The results indicate that the DNS server address is now configured as 0.0.0.0 You need to ensure that the computer can connect to network resources by name. What should you do?（）
    A

    Stop and restart the DNS Client service.

    B

    Add 10.1.1.5 to the DNS server list on the TCP/IP Advanced Properties tab.

    C

    Add an A （host） record for the computer to the DNS server’s zone file.

    D

    Configure your DHCP server to have a DNS server address of 10.1.1.5.


    正确答案： B
    解析： 暂无解析

相关内容