多项选择题

Which two statements are true about the Websense redirect Web filter solution? （）(Choose two.)

A. The Websense redirect Web filter solution does not require a license on the SRX device.
B. The Websense server provides the SRX device with a category for the URL and the SRX device then matches the category decides to permit or deny the URL.
C. The Websense server provides the SRX device with a decision as to whether the SRX device permits or denies the URL.
D. When the Websense server does not know the category of the URL, it sends a request back to the SRX device SurfControl server in the cloud.

<上一题目录下一题>

热门试题

单项选择题

Which antivirus solution integrated on branch SRX Series devices do you use to ensure maximum virus coverage for network traffic?（）

A. express AV
B. full AV
C. desktop AV
D. ICAP

多项选择题

Which two types of attacks are considered to be denial of service?（） (Choose two.)

A. zombie agents
B. SYN flood
C. IP packet fragments
D. WinNuke

单项选择题

Interface ge-0 0 2.0 of your device is attached to the Internet and is configured with an IP address and network mask of 71.33.252.17 24. A Web server with IP address 10.20.20.1 is running an HTTP service on TCP port 8080. The Web server is attached to the ge-0 0 0.0 interface of your device. You must use NAT to make the Web server reachable from the Internet using port translation. Which type of NAT must you configure?（）

A. source NAT with address shifting
B. pool-based source NAT
C. static destination NAT
D. pool-based destination NAT

单项选择题

Which encryption type is used to secure user data in an IPsec tunnel?（）

A. symmetric key encryption
B. asymmetric key encryption
C. RSA
D. digital certificates

单项选择题

Which command shows the event and traceoptions file for chassis clusters?（）

A. show log chassisd
B. show log clusterd
C. show log jsrpd
D. show log messages

多项选择题

Which three contexts can be used as matching conditions in a source NAT configuration? （）(Choose three.)

A. routing-instance
B. zone
C. interface
D. policy
E. rule-set

单项选择题

You want to test a configured screen value prior to deploying.Which statement will allow you to accomplish this?（）

A. [edit security screen] user@host# show ids-option untrust-screen { alarm-test-only; }
B. [edit security screen] user@host# show ids-option untrust-screen { alarm-without-drop; }
C. [edit security screen] user@host# show ids-option untrust-screen { alarm-no-drop; }
D. [edit security screen] user@host# show ids-option untrust-screen { test-without-drop; }

多项选择题

What are three different integrated UTM components available on the branch SRX Series devices?（） (Choose three.)

A. antivirus (full AV, express AV)
B. antivirus (desktop AV)
C. Web filtering
D. antispam
E. firewall user authentication

多项选择题

Which three actions can a branch SRX Series device perform on a spam e-mail message?（） (Choose three.)

A. It can drop the connection at the IP address level
B. It can block the e-mail based upon the sender ID
C. It can allow the e-mail and bypass all UTM inspection
D. It can allow the e-mail to be forwarded, but change the intended recipient to a new e-mail address
E. It can allow the e-mail to be forwarded to the destination, but tag it with a custom value in the subject line

多项选择题

Which two statements apply to policy scheduling?（） (Choose two.)

A. An individual policy can have only one scheduler applied.
B. You must manually configure system-time updates.
C. Multiple policies can use the same scheduler.
D. Policies that do not have schedulers are not active.