问题:多选题Which two statements are true regarding the system-default security policy [edit security policies default-policy]?()(Choose two.)ATraffic is permitted from the trust zone to the untrust zone.BIntrazone traffic in the trust zone is permitted.CAll traffic through the device is denied.DThe policy is matched only when no other matching policies are found.
查看答案
问题:单选题A BGP connection is being established.What happens if the local router and the peer router do NOT have the same hold-time value configured?()A The BGP session does not establish.B The hold time is assumed to be infinite.C The larger of the two hold-time values is used.D The smaller of the two hold-time values is used.
问题:单选题In a Bridged 1483 network, an ISP has received complaints from their subscribers of denial of service attacks. The ISP suspects these attacks are coming from other subscribers that share the same IP unnumbered interface on the ERX. What can be done to solve this problem?()A Enable Proxy ARP.B Disable Proxy ARP.C Enable Inverse ARP.D Disable Inverse ARP.
问题:单选题The same Web site is visited for the second time using a branch SRX Series Services Gateway configured with SurfControl integrated Web filtering.Which statement is true?()A The SRX device sends the URL to the SurfControl server in the cloud and the SurfControl server provides the SRX. B The SRX device sends the URL to the SurfControl server in the cloud and the SurfControl server asks the SRX device previously visited.C The SRX device looks at its local cache to find the category of the URL.D The SRX device does not perform any Web filtering operation as the Web site has already been visited.
问题:多选题Content filtering enables traffic to be permitted or blocked based on inspection of which three types of content?()(Choose three.)AMIME patternBfile extensionCIP spoofingDPOP3Eprotocol command
问题:多选题Which two statements about static NAT are true? ()(Choose two.)AStatic NAT can only be used with destination NAT.BStatic NAT rules take precedence over overlapping dynamic NAT rules.CNAT rules take precedence over overlapping static NAT rules.DA reverse mapping is automatically created.
问题:多选题What are three methods to apply a L2TP Tunnel Switch Profile? ()(Choose three.)Aaaa domain-mapBradius attributesCtunnel groupsDtunnel services profileEl2tp destination profile
问题:单选题Which configuration command is used to make the ERX Edge Router an NTP server?()Aset ntp-serverBset ntp serverCntp-server enableDntp server enable
问题:单选题Two Level 1 routers are exchanging Hello packets with different Area IDs.What occurs between these routers?()A An Adjacency is formed.B No IS-IS PDUs are sentC An Adjacency does not form.D An Adjacency forms but traffic is not forwarded.
问题:多选题Which two statements are true about the Websense redirect Web filter solution? ()(Choose two.)AThe Websense redirect Web filter solution does not require a license on the SRX device.BThe Websense server provides the SRX device with a category for the URL and the SRX device then matches the category decides to permit or deny the URL.CThe Websense server provides the SRX device with a decision as to whether the SRX device permits or denies the URL.DWhen the Websense server does not know the category of the URL, it sends a request back to the SRX device SurfControl server in the cloud.
问题:多选题Which three statements are correct regarding the CLI command, 12tp destination profile to-NewYork virtual-router vr1 ip address 1.1.1.1 ? ()(Choose three.)ALNS IP address is defined.BLAC IP address is defined.CVirtual-router vr1 sends and receives L2TP traffic.DVirtual-router vr1 is the authenticating virtual-router.EThis command is performed on the LNS.
问题:多选题The Origin attribute describes the source of the BGP prefix. Which three are valid Origin codes?() (Choose three.)AIGPBBGPCEGPDIncompleteEAnonymous
问题:单选题In a Bridged 1483 network, which set of commands is used to configure an ATM sub-interface?()A interface atm 6/0.33 atm pvc 33 0 33 aal5snap ip description Company-XYZ encapsulation bridge1483 ip address unnumbered loopback0B interface atm 6/0.33 atm pvc 33 0 33 aal5snap ip description Company-XYZ encapsulation bridge1483 ip unnumbered loopback0C interface atm 6/0.33 atm pvc 33 0 33 aal5snap encapsulation bridge1483 ip description Company-XYZ ip address unnumbered loopback0D interface atm 6/0.33 atm pvc 33 0 33 aal5snap encapsulation bridge1483 ip description Company-XYZ ip unnumbered loopback0
问题:单选题Which CLI command displays the currently connected PPPoA subscribers?()A show usersB show subscribersC show aaa subscriberD show connected subscriber
问题:单选题A user wants to establish an FTP session to a server behind an SRX device but must authenticate to a Web page on the SRX device for additional authentication.Which type of user authentication is configured?()A pass-throughB WebAuthC WebAuth with Web redirectD pass-through with Web redirect
问题:单选题Which command is used to display a address pool for a DHCP Local Server?()A show ip local poolB show ip dhcp local poolC show ip dhcp-local poolD show ip pool
问题:多选题Which three functions are provided by the Junos OS for security platforms?()(Choose three.)AVPN establishmentBstateful ARP lookupsCDynamic ARP inspectionDNetwork Address TranslationEinspection of packets at higher levels (Layer 4 and above)