최신Juniper SEC,Specialist(JNCIS-SEC) - JN0-331무료샘플문제

A. Telnet is not being permitted by security policy.

B. Telnet is not being permitted by self policy.

C. Telnet is not enabled as a host-inbound service on the zone.

D. Telnet is not allowed because it is not considered secure.

A. Security zones must have a scheduler applied.

B. You can use a security zone for traffic destined for the device itself.

C. You cannot assign an interface to a functional zone.

D. You can specifiy a functional zone in a security policy.

A. It defines hosts in a zone so they can be referenced by policies.

B. It holds security policies for particular hosts.

C. It maps hostnames to IP addresses to serve as a backup to DNS resolution.

D. It holds statistics about traffic to and from particular hosts.

A. set security zones functional-zone management interfaces ge-0/0/0.0

B. set zones functional-zone management interfaces ge-0/0/0.0

C. set security zones functional-zone out-of-band interfaces ge-0/0/0.0

D. set security zones management interfaces ge-0/0/0.0

A. JUNOS security devices can belong to one cluster only.

B. JUNOS security devices can belong to more than one cluster if cluster virtualization is enabled.

C. The valid cluster-id range is between 0 and 255.

D. A reboot is required if the cluster-id or node value is changed.

E. If the cluster-id value is set to 0 on a JUNOS security device, the device will not participate in the cluster.

A. reth interfaces are used only for VRRP.

B. reth interfaces are the same as physical interfaces.

C. reth interfaces are pseudo-interfaces that are considered the parent interface for two physical interfaces.

D. Each cluster member has a reth interface that can be used to share session state information with the other cluster members.

A. The new sessions matching the policy are denied. The existing sessions, not being allowed to carry any traffic, simply timeout.

B. The new sessions matching the policy might be allowed through if they match another policy. The existing sessions are dropped.

C. The new sessions matching the policy are denied. The existing sessions continue until they are completed or their timeout is reached.

D. The new sessions matching the policy are denied. The existing sessions are dropped.