题目详情
当前位置:首页 > 职业培训考试
题目详情:
发布时间:2023-10-11 05:46:56

[单项选择]You are installing a MAG Series device for access control using an SRX Series device as the firewall enforcer. The MAG Series device resides in the same security zone as users. However, the users reside in different subnets and use the SRX Series device as an IP gateway.Which statement is true?()
A. You must configure a security policy on the SRX Series device to allow traffic to flow from the user devices to the MAG Series device.
B. No security policy is necessary on the SRX Series device to allow traffic to flow from the user devices to the MAG Series device.
C. You must configure host-inbound traffic on the SRX Series device to allow SSL traffic between the MAG Series device and the user devices.
D. You must configure host-inbound traffic on the SRX Series device to allow EAP traffic between the MAG Series device and the user devices.

更多"You are installing a MAG Series dev"的相关试题:

[单项选择]You have a MAG Series device with IP address 10.0.1.5 and hostname ad .pulse.local acting as an IF-MAP Federation server. The subject name of the device certificate on this server is ad .pulse.local.Which server URL must you configure on the IF-MAP clients communicating with this IF-MAP Federation server?()
A. https://acl.pulse.local/dana-ws/soap/dsifmap
B. http://acl.pulse.local/dana-ws/soap/dsifmap
C. https://acl/dana-ws/soap/dsifmap
D. http://10.0.1.5/dana-ws/soap/dsifmap
[多项选择] Before replacing a MAG Series device, using the admin GUI, you export two backup files, system.cfg from "Maintenance" > "ImportfExport Configuration" and user.cfg from "Maintenance" > "Import/Export Users". When you receive the new hardware, you import all of the settings stored in the system.cfg file (including the IP address, network configuration, and device certificates), but you fail to import the user.cfg file. Which three configuration areas were updated by system.cfg?()
A. Cluster configuration settings
B. Static routes
C. SNMP settings
D. Sign-in policies
E. MAC authentication realms
[单项选择]Which service is provided by a MAG Series device?()
A. Routing
B. MPLS VPNs
C. Access control
D. Intrusion detection
[单项选择]Which account is used to access a Junos device in factory-default configuration?()
A. root
B. admin
C. juniper
D. user
[单项选择]You have multiple realms configured on a MAG Series device. A user is authenticating with a non- Junos Pulse Access Control Service client. The username does not contain a realm suffix.Which behavior will the user experience?()
A. The user will not be able to log-in, as the Junos Pulse Access Control Service device cannot map the user to a realm when the realm value is empty.
B. The user will be mapped to all realms available to the user.
C. The Junos Pulse Access Control Service device displays a page where the user must choose from a list of realms.
D. The endpoint is assigned to the first realm in the list whose authentication server is a match with the endpoints software.
[单项选择]A scanner is an ______ device which enables you to feed pictures, photos or documents into a computer system.
A. ambiguous
B. ingenious
C. intrinsic
D. rigorous
[多项选择]You are performing the initial setup of a new MAG Series device and have installed a valid CA- signed certificate on the MAG Series device. Connectivity to an existing SRX Series firewall enforcer cannot be obtained.What are two explanations for this behavior?()
A. The MAG Series device has multiple ports associated with the certificate.
B. The MAG Series device's serial number needs to be configured on the SRX Series device.
C. The SRX Series device must have a certificate signed by the same authority as the MAG Series device.
D. The MAG Series device and SRX Series device are not synchronized to an NTP server.
[单项选择]You have finished physically installing an access point on the ceiling at your officE.At a minimum, which paramenter must be configured on the access point in order to allow a wireless client to operate on it?()
A. AES
B. PSK
C. SSID
D. TKIP
E. WEP
[单项选择]You want to allow your device to establish OSPF adjacencies with a neighboring device connected to interface ge-0/0/3.0. Interface ge-0/0/3.0 is a member of the HR zone.Under which configuration hierarchy must you permit OSPF traffic?()
A. [edit security policies from-zone HR to-zone HR]
B. [edit security zones functional-zone management protocols]
C. [edit security zones protocol-zone HR host-inbound-traffic]
D. [edit security zones security-zone HR host-inbound-traffic protocols]
[多项选择]You receive an alarm that your Junos device is experiencing problems regarding temperature. Which two commands would you use to investigate this problem?()
A. show chassis hardware
B. show chassis temperature-thresholds
C. show chassis pic fpc-slot pic-slot
D. show chassis environment
[多项选择]You must configure access to the corporate network for employees using a client access method. Users require IPsec tunneling to protected resources and an 802.1X supplicant. Users will access the network using Windows platforms.Which two client access methods would support these requirements?()
A. Junos Pulse
B. Java Agent
C. Odyssey Access Client
D. Native 802.1X supplicant
[多项选择]You have configured a Classifier Access Control List(CLACL)with multiple match clauses.Each match clause has multiple defined fields within it.Which two statements describe how the router evaluates this CLACL?()
A. All fields in each match clause must match.
B. All match clauses in the CLACL must match.
C. Only asingle field in each match clause must match.
D. Only asingle match clause in the CLACL must match
[单项选择]You have configured the Odyssey Access Client with a profile which has the "Disable Server Verification" setting cleared.What will be the result if the device certificate on the MAG Series device has expired and the user attempts to authenticate?()
A. The user will be instructed to call the network administrator.
B. The user will fail authentication.
C. The user will be prompted to install a new device certificate on the MAG Series device.
D. The user will successfully authenticate and have full network access.
[多项选择]You need to add a reservation for a print device to a DHCP scope.Which two components should you include in the reservation?()
A. the default gateway
B. the IP address
C. the MAC address
D. the printer server name
E. the subnet mask
[多项选择]On the Junos Pulse Access Control Service, you have created a role called Secret that you only want to provide to users who present a certificate.Using the admin GUI, which two features would you configure to satisfy this requirement?()
A. Sign-in Policy
B. Role Mapping Rule
C. Role Restrictions
D. Trusted Server CA

我来回答:

购买搜题卡查看答案
[会员特权] 开通VIP, 查看 全部题目答案
[会员特权] 享免全部广告特权
推荐91天
¥36.8
¥80元
31天
¥20.8
¥40元
365天
¥88.8
¥188元
请选择支付方式
  • 微信支付
  • 支付宝支付
点击支付即表示同意并接受了《购买须知》
立即支付 系统将自动为您注册账号
请使用微信扫码支付

订单号:

请不要关闭本页面,支付完成后请点击【支付完成】按钮
恭喜您,购买搜题卡成功
重要提示:请拍照或截图保存账号密码!
我要搜题网官网:https://www.woyaosouti.com
我已记住账号密码