多项选择题

What are three configuration objects used to build Junos IDP rules? （）(Choose three.)

A. zone objects
B. policy objects
C. attack objects
D. alert and notify objects
E. network and address objects

<上一题 目录 下一题>
热门 试题

多项选择题
You are required to configure a SCREEN option that enables IP source route option detection.Which twoconfigurations meet this requirement?（） (Choose two.)

A. [edit security screen] user@host# show ids-option protectFromFlood { ip { loose-source-route-option; strict-source-route-option; } }
B. [edit security screen] user@host# show ids-option protectFromFlood { ip { source-route-option; } }
C. [edit security screen] user@host# show ids-option protectFromFlood { ip { record-route-option; security-option; } }
D. [edit security screen] user@host# show ids-option protectFromFlood { ip { strict-source-route-option; record-route-option; } }
多项选择题
Which two statements about the Diffie-Hellman (DH) key exchange process are correct? （）(Choose two.)

A. In the DH key exchange process, the session key is never passed across the network.
B. In the DH key exchange process, the public and private keys are mathematically related using the DH algorithm.
C. In the DH key exchange process, the session key is passed across the network to the peer for confirmation.
D. In the DH key exchange process, the public and private keys are not mathematically related, ensuring higher security
单项选择题
What is the default session timeout for UDP sessions?（）

A. 30 seconds
B. 1 minute
C. 5 minutes
D. 30 minutes
多项选择题
A network administrator receives complaints from the engineering group that an application on one server is not working properly. After further investigation, the administrator determines that source NAT translation is using a different source address after a random number of flows. Which two actions can the administrator take to force the server to use one address?（） (Choose two.)

A. Use the custom application feature.
B. Configure static NAT for the host.
C. Use port address translation (PAT).
D. Use the address-persistent option.
单项选择题
A user wants to establish an FTP session to a server behind an SRX device but must authenticate to a Web page on the SRX device for additional authentication.Which type of user authentication is configured?（）

A. pass-through
B. WebAuth
C. WebAuth with Web redirect
D. pass-through with Web redirect
单项选择题
Your task is to provision the Junos security platform to permit transit packets from the Private zone to the External zone by using an IPsec VPN and log information at the time of session close.Which configuration meets this requirement?（）

A. [edit security policies from-zone Private to-zone External] user@host# show policy allowTransit { match { source-address PrivateHosts;destination-address ExtServers; application ExtApps; } then { permit { tunnel { ipsec-vpn VPN; } } log { session-init; } } }
B. [edit security policies from-zone Private to-zone External] user@host# show policy allowTransit { match { source-address PrivateHosts; destination-address ExtServers; application ExtApps; } then { permit { tunnel { ipsec-vpn VPN; } } count { session-close; } } }
C. [edit security policies from-zone Private to-zone External] user@host# showpolicy allowTransit { match { source-address PrivateHosts; destination-address ExtServers; application ExtApps; } then { permit { tunnel { ipsec-vpn VPN;} } log { session-close; } } }
D. [edit security policies from-zone Private to-zone External] user@host# show policy allowTransit { match { source-address PrivateHosts; destination-address ExtServers; application ExtApps; } then { permit { tunnel { ipsec-vpn VPN; log; count session-close; } } } }
多项选择题
Which two statements regarding firewall user authentication client groups are true?（） (Choose two.)

A. A client group is a list of clients associated with a group.
B. A client group is a list of groups associated with a client.
C. Client groups are referenced in security policy in the same manner in which individual clients are referenced.
D. Client groups are used to simplify configuration by enabling firewall user authentication without security policy.
单项选择题
How many IDP policies can be active at one time on an SRX Series device by means of the set security idp active-policy configuration statemen?（）

A.1
B.2
C.4
D.8
多项选择题
Which three are necessary for antispam to function properly on a branch SRX Series device? （）(Choose three.)

A. an antispam license
B. DNS servers configured on the SRX Series device
C. SMTP services on SRX
D. a UTM profile with an antispam configuration in the appropriate security policy
E. antivirus (full or express)
单项选择题
Which command would you use to enable chassis cluster on an SRX device, setting the cluster ID to 1 and node to 0?（）

A. user@host# set chassis cluster cluster-id 1 node 0 reboot
B. user@host> set chassis cluster id 1 node 0 reboot
C. user@host> set chassis cluster cluster-id 1 node 0 reboot
D. user@host# set chassis cluster id 1 node 0 reboot
相关试题