单项选择题

Which IDP policy action closes the connection and sends an RST packet to both the client and the server?（）

A. close-connection
B. terminate-connection
C. close-client-and-server
D. terminate-session

<上一题 目录 下一题>
热门 试题

多项选择题
What are two components of the Junos software architecture? （）(Choose two.)

A. Linux kernel
B. routing protocol daemon
C. session-based forwarding module
D. separate routing and security planes
多项选择题
Which two statements are true regarding redundancy groups? （）(Choose two.)

A. When priority settings are equal and the members participating in a cluster are initialized at the same time, the primary assigned to node 0.
B. The preempt option determines the primary and secondary roles for redundancy group 0 during a failure and recovery
C. Redundancy group 0 manages the control plane failover between the nodes of a cluster.
D. The primary role can be shared for redundancy group 0 when the active-active option is enabled.
单项选择题
The Junos OS blocks an HTTP request due to a Websense server response.Which form of Web filtering is being used?（）

A. redirect Web filtering
B. integrated Web filtering
C. categorized Web filtering
D. local Web filtering
多项选择题
What are two TCP flag settings that are considered suspicious? （）(Choose two.)

A. Do-Not-Fragment flag is set.
B. Both SYN and FIN flags are set.
C. Both ACK and PSH flags are set.
D. FIN flag is set and ACK flag is not set.
多项选择题
Which three features are part of the branch SRX series UTM suite?（） (Choose three.)

A. antispam
B. antivirus
C. IPS
D. application firewalling
E. Web filtering
单项选择题
When an SRX series device receives an ESP packet, what happens?（）

A. If the destination address of the outer IP header of the ESP packet matches the IP address of the ingress interface, it will
B. If the destination IP address in the outer IP header of ESP does not match the IP address of the ingress interface, it will
C. If the destination address of the outer IP header of the ESP packet matches the IP address of the ingress interface, based packet.
D. If the destination address of the outer IP header of the ESP packet matches the IP address of the ingress interface, based of inner header, it will decrypt the packet.
单项选择题
What is the maximum number of layers of decompression that juniper-express-engine (express AV) can decompress for the HTTP protocol?（）

A.0
B.1
C.4
D.8
多项选择题
What are three configuration objects used to build Junos IDP rules? （）(Choose three.)

A. zone objects
B. policy objects
C. attack objects
D. alert and notify objects
E. network and address objects
多项选择题
You are required to configure a SCREEN option that enables IP source route option detection.Which twoconfigurations meet this requirement?（） (Choose two.)

A. [edit security screen] user@host# show ids-option protectFromFlood { ip { loose-source-route-option; strict-source-route-option; } }
B. [edit security screen] user@host# show ids-option protectFromFlood { ip { source-route-option; } }
C. [edit security screen] user@host# show ids-option protectFromFlood { ip { record-route-option; security-option; } }
D. [edit security screen] user@host# show ids-option protectFromFlood { ip { strict-source-route-option; record-route-option; } }
多项选择题
Which two statements about the Diffie-Hellman (DH) key exchange process are correct? （）(Choose two.)

A. In the DH key exchange process, the session key is never passed across the network.
B. In the DH key exchange process, the public and private keys are mathematically related using the DH algorithm.
C. In the DH key exchange process, the session key is passed across the network to the peer for confirmation.
D. In the DH key exchange process, the public and private keys are not mathematically related, ensuring higher security
相关试题