当前分类： JN0-331
问题：多选题You are implementing an IDP policy template from Juniper Networks. Which three steps are included in thisprocess？（）Aactivating a JUNOS Software commit scriptBconfiguring an IDP groups statementCsetting up a chassis clusterDdownloading the IDP policy te...
查看答案
问题：单选题You must configure a SCREEN option that would protect your device from a session table flood.Which configuration meets this requirement？（）A AB BC CD D...
问题：单选题What is the functionality of redundant interfaces （reth） in a chassis cluster？（）A reth interfaces are used only for VRRP.B reth interfaces are the same as physical interfaces.C reth interfaces are pseudo-interfaces that are considered the parent interf...
问题：单选题Which statement is true about interface-based source NAT？（）A PAT is a requirement.B It requires you to configure address entries in the junos-nat zone.C It requires you to configure address entries in the junos-global zone.D The IP addresses being tran...
问题：多选题What are three configuration objects used to build JUNOS IDP rules？（）Azone objectsBpolicy objectsCattack objectsDalert and notify objectsEnetwork and address objects...
问题：单选题You want to allow your device to establish OSPF adjacencies with a neighboring device connected tointerface ge-0/0/3.0. Interface ge-0/0/3.0 is a member of the HR zone.Under which configuration hierarchy must you permit OSPF traffic？（）A [edit security ...
问题：多选题You have been tasked with performing an update to the IDP attack database. Which three requirements areincluded as part of this task？（）AThe IDP security package must be installed after it is downloaded.BThe device must be rebooted to complete the updat...
问题：单选题Which statement is true about source NAT？（）A Source NAT works only with source pools.B Destination NAT is required to translate the reply traffic.C Source NAT does not require a security policy to function.D The egress interface IP address can be used ...
问题：单选题Which configuration shows a pool-based source NAT without PAT’？（）A AB BC CD D...
问题：单选题Which IDP policy action closes the connection and sends an RST packet to both the client and the server？（）A close-connectionB terminate-connectionC close-client-and-serverD terminate-session...
问题：多选题Assume the default-policy has not been configured.Given the configuration shown in the exhibit， which two statements about traffic from host_a inthe HR zone to host_b in the trust zone are true？（） [edit security policies from-zone HR to-zone trust] use...
问题：多选题What are three benefits of using chassis clustering？（）AProvides stateful session failover for sessions.BIncreases security capabilities for IPsec sessions.CProvides active-passive control and data plane redundancy.DEnables automated fast-reroute capabi...
问题：多选题Which three functions are provided by JUNOS Software for security platforms？（）AVPN establishmentBstateful ARP lookupsCDynamic ARP inspectionDNetwork Address TranslationEinspection of packets at higher levels （Layer 4 and above）...
问题：单选题Based on the configuration shown in the exhibit， what will happen to the traffic matching thesecurity policy？（） [edit schedulers] user@host# showscheduler now { monday all-day； tuesday exclude； wednesday { start-time 07：00：00 stop-time 18：00：00； } thur...
问题：多选题Which two statements are true about overflow pools？（）AOverflow pools do not support PATBOverflow pools can not use the egress interface IP address for NATCOverflow pools must use PATDOverflow pools can contain the egress interface IP address or separat...
问题：多选题Which three options represent IDP policy match conditions？（）AprotocolBsource-addressCportDapplicationEattacks...
问题：多选题Which two statements are true regarding high-availability chassis clustering？（）AA chassis cluster consists of two devices.BA chassis cluster consists of two or more devices.CDevices participating in a chassis cluster can be different models.DDevices pa...
问题：多选题Which two statements describe the purpose of a security policy？（）AIt enables traffic counting and logging.BIt enforces a set of rules for transit traffic.CIt controls host inbound services on a zone.DIt controls administrator rights to access the devic...
问题：单选题Which statement is true about a NAT rule action of off？（）A The NAT action of off is only supported for destination NAT rule-sets.B The NAT action of off is only supported for source NAT rule-sets.C The NAT action of off is useful for detailed control o...
