问题：单选题Which statement describes the behavior of a security policy？（）A The implicit default security policy permits all traffic.B Traffic destined to the device itself always requires a security policy.C Traffic destined to the device’s incoming interface doe...
Sunday, January 14, 2024
问题：多选题Which two commands can be used to monitor firewall user authentication？（）Ashow access firewall-authenticationBshow security firewall-authentication usersCshow security audit logDshow security firewall-authentication history...
Monday, August 7, 2023
问题：单选题Which statement is true about a NAT rule action of off？（）A The NAT action of off is only supported for destination NAT rule-sets.B The NAT action of off is only supported for source NAT rule-sets.C The NAT action of off is useful for detailed control o...
Monday, January 15, 2024
问题：多选题Which two are uses of NAT？（）Aenabling network migrationsBconserving public IP addressesCallowing stateful packet inspectionDpreventing unauthorized connections from outside the network...
Wednesday, November 8, 2023
问题：多选题Which two functions of JUNOS Software are handled by the data plane？（）ANATBOSPFCSNMPDSCREEN options...
Sunday, March 17, 2024
问题：多选题Which two steps are performed when configuring a zone？（）ADefine a default policy for the zone.BAssign logical interfaces to the zone.CAssign physical interfaces to the zone.DDefine the zone as a security or functional zone...
Tuesday, October 10, 2023
问题：单选题What is the purpose of a zone in JUNOS Software？（）A A zone defines a group of security devices with a common management.B A zone defines the geographic region in which the security device is deployed.C A zone defines a group of network segments with si...
Friday, March 24, 2023
问题：多选题Which two statements are true about pool-based destination NAT？（）AIt also supports PAT.BPAT is not supported.CIt allows the use of an address pool.DIt requires you to configure an address in the junos-global zone....
问题：单选题Which attribute is required for all IKE phase 2 negotiations？（）A proxy-IDB preshared keyC Diffie-Hellman group keyD main or aggressive mode...
Saturday, February 10, 2024
问题：多选题Which two statements describe the purpose of a security policy？（）AIt enables traffic counting and logging.BIt enforces a set of rules for transit traffic.CIt controls host inbound services on a zone.DIt controls administrator rights to access the devic...
问题：多选题What are three configuration objects used to build JUNOS IDP rules？（）Azone objectsBpolicy objectsCattack objectsDalert and notify objectsEnetwork and address objects...
Thursday, May 11, 2023
问题：多选题You are creating a destination NAT rule-set. Which two are valid for use with the from clause？（）Asecurity policyBinterfaceCrouting-instanceDIP address...
Saturday, February 25, 2023
问题：多选题Which two statements about the use of SCREEN options are correct？（）ASCREEN options are deployed at the ingress and egress sides of a packet flow.BAlthough SCREEN options are very useful， their use can result in more session creation.CSCREEN options off...
Tuesday, March 12, 2024
问题：单选题You want to allow all hosts on interface ge-0/0/0.0 to be able to ping the device’s ge-0/0/0.0 IP address.Where do you configure this functionality？（）A [edit interfaces]B [edit security zones]C [edit system services]D [edit security interfaces]...
Tuesday, August 22, 2023
问题：单选题An attacker sends a low rate of TCP SYN segments to hosts， hoping that at least one port replies. Which type of an attack does this scenario describe？（）A DoSB SYN floodC port scanningD IP address sweep...
问题：多选题Which two statements are true regarding firewall user authentication？（）AWhen configured for pass-through firewall user authentication， the user must first open a connection to the JUNOS security platform before connecting to a remote network resource.B...
问题：多选题Which three statements are true regarding IDP？（）AIDP cannot be used in conjunction with other JUNOS Software security features such as SCREEN options，zones， and security policy.BIDP inspects traffic up to the Application layer.CIDP searches the data st...
问题：单选题Given the configuration shown in the exhibit， which configuration object would be used to associate bothNancy and Walter with firewall user authentication within a security policy？（） profile ftp-users { client nancy { firewall-user { password "$9$lJ8vL...
问题：多选题Which two statements regarding asymmetric key encryption are true？（）AThe same key is used for encryption and decryption.BIt is commonly used to create digital certificate signatures.CIt uses two keys： one for encryption and a different key for decrypti...
Sunday, October 23, 2022
问题：多选题Which two statements regarding firewall user authentication client groups are true？（）AIndividual clients are configured under client groups in the configuration hierarchy.BClient groups are configured under individual clients in the configuration hiera...
