多项选择题

Click the Exhibit button.

Assume the default-policy has not been configured.Given the configuration shown in the exhibit, which two statements about traffic from host_a in the HR zone to host_b in the trust zone are true? （）(Choose two.)

A. DNS traffic is denied.
B. HTTP traffic is denied.
C. FTP traffic is permitted.
D. SMTP traffic is permitted.

<上一题 目录 下一题>
热门 试题

单项选择题
Click the Exhibit button. [A] establishes an IPsec tunnel with [B]. The NAT device translates the IP address 1.1.1.1 to 2.1.1.1.On which port is the IKE SA established?（）

A.TCP 500
B.UDP 500
C.TCP 4500
D.UDP 4500
多项选择题
Click the Exhibit button. What are two valid reasons for the output shown in the exhibit?（） (Choose two.)

A. The local Web-filtering daemon is not enabled or is not running.
B. The integrated Web-filtering policy server is not reachable.
C. No DNS is configured on the SRX Series device.
D. No security policy is configured to use Web filtering.
单项选择题
Click the Exhibit button. In the exhibit, you decided to change myHosts addresses.What will happen to the new sessions matching the policy and in-progress sessions that had already matched the policy?（）

A. New sessions will be evaluated. In-progress sessions will be re-evaluated.
B. New sessions will be evaluated. All in-progress sessions will continue.
C. New sessions will be evaluated. All in-progress sessions will be dropped.
D. New sessions will halt until all in-progress sessions are re-evaluated. In-progress sessions will be re-evaluated.
多项选择题
Click the Exhibit button. System services SSH, Telnet, FTP, and HTTP are enabled on the SRX Series device. Referring to the configuration shown in the exhibit, which two statements are true? （）(Choose two.)

A. A user can use SSH to interface ge-0/0/0.0 and ge-0/0/1.0.
B. A user can use FTP to interface ge-0/0/0.0 and ge-0/0/1.0.
C. A user can use SSH to interface ge-0/0/0.0.
D. A user can use SSH to interface ge-0/0/1.0.
单项选择题
Click the Exhibit button. Which type of NAT is being used in the exhibit?（）

A. no NAT
B. destination NAT
C. source NAT 
D. port address translation (PAT)
单项选择题
Which element occurs first during the first-packet-path processing?（）

A. destination NAT
B. forwarding lookup
C. route lookup
D. SCREEN options
单项选择题
To determine whether a particular file has a virus by only inspecting a few initial packets before receiving the entire file, which UTM feature do you enable?（）

A. URL white lists
B. intelligent pre-screening
C. trickling
D. scan mode extensions
单项选择题
The same Web site is visited for the second time using a branch SRX Series Services Gateway configured with SurfControl integrated Web filtering.Which statement is true?（）

A. The SRX device sends the URL to the SurfControl server in the cloud and the SurfControl server provides the SRX. 
B. The SRX device sends the URL to the SurfControl server in the cloud and the SurfControl server asks the SRX device previously visited.
C. The SRX device looks at its local cache to find the category of the URL.
D. The SRX device does not perform any Web filtering operation as the Web site has already been visited.
单项选择题
What is the maximum number of layers of compression that kaspersky-lab-engine (full AV) can decompress for the HTTP protocol?（）

A.1
B.4
C.8
D.16
多项选择题
Which two statements are true about pool-based source NAT? （）(Choose two.)

A. PAT is not supported.
B. PAT is enabled by default.
C. It supports the address-persistent configuration option.
D. It supports the junos-global configuration option.
相关试题