当前分类： JN0-331
问题：多选题You are implementing an IDP policy template from Juniper Networks. Which three steps are included in thisprocess？（）Aactivating a JUNOS Software commit scriptBconfiguring an IDP groups statementCsetting up a chassis clusterDdownloading the IDP policy te...
查看答案
问题：单选题You want to allow all hosts on interface ge-0/0/0.0 to be able to ping the device’s ge-0/0/0.0 IP address.Where do you configure this functionality？（）A [edit interfaces]B [edit security zones]C [edit system services]D [edit security interfaces]...
问题：多选题Which two statements are true regarding high-availability chassis clustering？（）AA chassis cluster consists of two devices.BA chassis cluster consists of two or more devices.CDevices participating in a chassis cluster can be different models.DDevices pa...
问题：多选题Which two statements describe the purpose of a security policy？（）AIt enables traffic counting and logging.BIt enforces a set of rules for transit traffic.CIt controls host inbound services on a zone.DIt controls administrator rights to access the devic...
问题：多选题Which two statements are true about pool-based destination NAT？（）AIt also supports PAT.BPAT is not supported.CIt allows the use of an address pool.DIt requires you to configure an address in the junos-global zone....
问题：单选题Which configuration keyword ensures that all in-progress sessions are re-evaluated upon committing asecurity policy change？（）A policy-rematchB policy-evaluateC rematch-policyD evaluate-policy...
问题：单选题A traditional router is better suited than a firewall device for which function？（）A VPN establishmentB packet-based forwardingC stateful packet processingD Network Address Translation...
问题：单选题Which attribute is required for all IKE phase 2 negotiations？（）A proxy-IDB preshared keyC Diffie-Hellman group keyD main or aggressive mode...
问题：多选题Which three advanced permit actions within security policies are valid？（）AMark permitted traffic for firewall user authentication.BMark permitted traffic for SCREEN options.CAssociate permitted traffic with an IPsec tunnel.DAssociate permitted traffic ...
问题：单选题Given the configuration shown in the exhibit， which configuration object would be used to associate bothNancy and Walter with firewall user authentication within a security policy？（） profile ftp-users { client nancy { firewall-user { password "$9$lJ8vL...
问题：多选题Which two statements about JUNOS Software packet handling are correct？（）AJUNOS Software applies service ALGs only for the first packet of a flow.BJUNOS Software uses fast-path processing only for the first packet of a flow.CJUNOS Software performs rout...
问题：单选题Which statement is true about a NAT rule action of off？（）A The NAT action of off is only supported for destination NAT rule-sets.B The NAT action of off is only supported for source NAT rule-sets.C The NAT action of off is useful for detailed control o...
问题：多选题Which two statements regarding firewall user authentication client groups are true？（）AIndividual clients are configured under client groups in the configuration hierarchy.BClient groups are configured under individual clients in the configuration hiera...
问题：单选题You have been tasked with installing two SRX 5600 platforms in a high-availability cluster. Which requirement must be met for a successful installation？（）A You must enable SPC detect within the configuration.B You must enable active-active failover for...
问题：单选题When applying the configuration in the exhibit and initializing a chassis cluster， which statement is correct？（） [edit chassis] user@host# show cluster { reth-count 3； redundancy-group 1 { node 0 priority 1； node 1 priority 100； } }A Three physical int...
问题：多选题Which two functions of JUNOS Software are handled by the data plane？（）ANATBOSPFCSNMPDSCREEN options...
问题：单选题An attacker sends a low rate of TCP SYN segments to hosts， hoping that at least one port replies. Which type of an attack does this scenario describe？（）A DoSB SYN floodC port scanningD IP address sweep...
问题：多选题Which two statements are true regarding firewall user authentication？（）AWhen configured for pass-through firewall user authentication， the user must first open a connection to the JUNOS security platform before connecting to a remote network resource.B...
问题：多选题You are creating a destination NAT rule-set. Which two are valid for use with the from clause？（）Asecurity policyBinterfaceCrouting-instanceDIP address...
