多选题 What are two uses of NAT?()
conserving public IP addresses
allowing stateful packet inspection
preventing unauthorized connections from outside the network
allowing networks with overlapping private address space to communicate
多选题 What are three benefits of using chassis clustering?()
Provides stateful session failover for sessions.
Increases security capabilities for IPsec sessions.
Provides active-passive control and data plane redundancy.
Enables automated fast-reroute capabilities.
Synchronizes configuration files and session state
单选题 When devices are in cluster mode, which new interfaces are created?()
No new interface is created.
Only the st interface is created.
fxp1, fab0, and fab1 are created.
st,fxp1,reth,fab0,and fab1 are created.
单选题 Which zone is a system-defined zone?()
null zone
trust zone
untrust zone
management zone
多选题 Which three methods of source NAT does JUNOS Software support?()
interface-based source NAT
source NAT with address shifting
source NAT using static source pool
interface-based source NAT without PAT
source NAT with address shifting and PAT
单选题 Which statement regarding the implementation of an IDP policy template is true?()
IDP policy templates are automatically installed as the active IDP policy.
IDP policy templates are enabled using a commit script.
IDP policy templates can be downloaded without an IDP license.
IDP policy templates are included in the factory-default configuration.
多选题 Assume the default-policy has not been configured.Given the configuration shown in the exhibit, which two statements about traffic from host_a inthe HR zone to host_b in the trust zone are true?() [edit security policies from-zone HR to-zone trust] user@host# show policy one { match { source-address any; destination-address any; application [ junos-http junos-ftp ]; } then { permit; } } policy two { match { source-address host_a; destination-address host_b; application [ junos-http junos-smtp ]; } then { deny; } }
DNS traffic is denied.
HTTP traffic is denied.
FTP traffic is permitted.
SMTP traffic is permitted.
多选题 Which two statements about JUNOS Software packet handling are correct?()
JUNOS Software applies service ALGs only for the first packet of a flow.
JUNOS Software uses fast-path processing only for the first packet of a flow.
JUNOS Software performs route and policy lookup only for the first packet of a flow.
JUNOS Software applies SCREEN options for both first and consecutive packets of a flow.
多选题 Which two configuration options must be present for IPv4 transit traffic to pass between the ge-0/0/0.0 andge-0/0/2.0 interfaces?()
family inet
a security zone
a routing instance
host-inbound-traffic
单选题 What is the default session timeout for UDP sessions?()
30 seconds
1 minute
5 minutes
30 minutes