问题：单选题Regarding a route-based versus policy-based IPsec VPN， which statement is true？（）A A route-based VPN generally uses less resources than a policy-based VPN.B A route-based VPN cannot have a deny action in a policy； a policy-based VPN can have a deny act...
Saturday, July 5, 2025
问题：多选题What are three configuration objects used to build JUNOS IDP rules？（）Azone objectsBpolicy objectsCattack objectsDalert and notify objectsEnetwork and address objects...
Friday, April 18, 2025
问题：多选题Which two functions of JUNOS Software are handled by the data plane？（）ANATBOSPFCSNMPDSCREEN options...
Tuesday, April 22, 2025
问题：多选题Assume the default-policy has not been configured.Given the configuration shown in the exhibit， which two statements about traffic from host_a inthe HR zone to host_b in the trust zone are true？（） [edit security policies from-zone HR to-zone trust] use...
Friday, October 4, 2024
问题：单选题An attacker sends a low rate of TCP SYN segments to hosts， hoping that at least one port replies. Which type of an attack does this scenario describe？（）A DoSB SYN floodC port scanningD IP address sweep...
问题：多选题Which two statements are true about overflow pools？（）AOverflow pools do not support PATBOverflow pools can not use the egress interface IP address for NATCOverflow pools must use PATDOverflow pools can contain the egress interface IP address or separat...
Monday, May 19, 2025
问题：单选题A policy-based IPsec VPN is ideal for which scenario？（）A when you want to conserve tunnel resourcesB when the remote peer is a dialup or remote access clientC when you want to configure a tunnel policy with an action of denyD when a dynamic routing pro...
问题：单选题Which type of source NAT is configured in the exhibit？（） [edit security nat source] user@host# show rule-set 1 { from interface ge-0/0/2.0； to zone untrust； rule 1A {match { destination-address 1.1.70.0/24； } then { source-nat interface； } } }A interfa...
Thursday, December 5, 2024
问题：多选题Which three functions are provided by JUNOS Software for security platforms？（）AVPN establishmentBstateful ARP lookupsCDynamic ARP inspectionDNetwork Address TranslationEinspection of packets at higher levels （Layer 4 and above）...
Friday, April 11, 2025
问题：多选题Which two statements describe the purpose of a security policy？（）AIt enables traffic counting and logging.BIt enforces a set of rules for transit traffic.CIt controls host inbound services on a zone.DIt controls administrator rights to access the devic...
Thursday, May 15, 2025
问题：单选题When applying the configuration in the exhibit and initializing a chassis cluster， which statement is correct？（） [edit chassis] user@host# show cluster { reth-count 3； redundancy-group 1 { node 0 priority 1； node 1 priority 100； } }A Three physical int...
Tuesday, May 20, 2025
问题：多选题Which three options represent IDP policy match conditions？（）AprotocolBsource-addressCportDapplicationEattacks...
问题：单选题A network administrator wants to permit Telnet traffic initiated from the address book entry the10net in azone called UNTRUST to the address book entry Server in a zone called TRUST.However， the administrator does not want the server to be able to init...
问题：单选题Which statement is true about a NAT rule action of off？（）A The NAT action of off is only supported for destination NAT rule-sets.B The NAT action of off is only supported for source NAT rule-sets.C The NAT action of off is useful for detailed control o...
问题：单选题Based on the configuration shown in the exhibit， what will happen to the traffic matching thesecurity policy？（） [edit schedulers] user@host# showscheduler now { monday all-day； tuesday exclude； wednesday { start-time 07：00：00 stop-time 18：00：00； } thur...
问题：单选题Which configuration keyword ensures that all in-progress sessions are re-evaluated upon committing asecurity policy change？（）A policy-rematchB policy-evaluateC rematch-policyD evaluate-policy...
问题：多选题Which two parameters are configured in IPsec policy？（）AmodeBIKE gatewayCsecurity proposalDPerfect Forward Secrecy...
问题：多选题Which three advanced permit actions within security policies are valid？（）AMark permitted traffic for firewall user authentication.BMark permitted traffic for SCREEN options.CAssociate permitted traffic with an IPsec tunnel.DAssociate permitted traffic ...
问题：单选题Which IDP policy action closes the connection and sends an RST packet to both the client and the server？（）A close-connectionB terminate-connectionC close-client-and-serverD terminate-session...
问题：单选题Which configuration shows a pool-based source NAT without PAT’？（）A AB BC CD D...
Tuesday, May 6, 2025
