单选题
You are an administrator of an active/passive cluster of MAG Series devices running in mixed- mode configuration (IF-MAP server and authenticating users). The active user count is quickly approaching the maximum limit of the cluster. You have been directed to reconfigure the cluster to an active/active cluster and add a new license to increase the total number of active users the cluster can support. What must you do before changing the cluster configuration?（）
Apply the new license to the passive node of the cluster.
Configure an external load balancer to hold the V IP.
Disable the active node in the cluster.
Remove the IF-MAP server configuration.
单选题
When using RADIUS as an external authentication method for 802.1X authentication for the Junos Pulse Access Control Service, what must you do to ensure that the RADIUS authentication works properly?（）
Configure IP helper to forward the authentication requests from the clients to the external RADIUS server
Configure the supplicant as anexternal authentication server
Configure RADIUS proxy on the realm
Specify the correct RADIUS port 389 on the Junos Pulse Access Control Service
单选题
You are validating the configuration of your SRX Series device and see the output shown below. What does this indicate?（）
The SRX Series device has been configured correctly, the Junos Pulse Access Control Service is reachable on the network, and the SRX Series device is waiting to receive the initial connection from the Junos Pulse Access Control Service.
The SRX Series device has confirmed that the Junos Pulse Access Control Service is configured and is reachable on the network, the SRX Series device is waiting to receive the connection from the Junos Pulse Access Control Service, and all that remains to be accomplished is to configure the SRX Series device.
The SRX Series device is configured correctly and connected to the Junos Pulse Access Control Service. All that remains to be done to complete the configuration is to configure the SRX Series device on the Junos Pulse Access Control Service.
Both the Junos Pulse Access Control Service and the SRX Series device are configured correctly and communicating with each other.
多选题
You are the network administrator for your company. A user is complaining that they are not able to access the network with the Junos Pulse client. You run a packet capture on the network interface to monitor the 802.1X authentication process. You notice that after the EAP- request/identity packet is received, and the supplicant responds with an EAP-response/identity packet, no further communication occurs for several seconds. What are three causes for this behavior? （）
The authenticator is not licensed to support Junos Pulse.
The authenticator did not receive the EAP-response/identity packet.
The authentication server is not receiving the RADIUS packet containing the EAP-response/identity data.
The authenticator is sending the request over its loopback interface.
The authentication server is sending back a RADIUS response packet, but the authenticator is not forwarding the response back to the supplicant.
单选题
You are configuring captive portal on your SRX Series device for guest user access.When would you use the redirect-traffic all command?（）
When you want all unauthenticated traffic to be redirected
When you want all clear text traffic to be redirected.
When you want all authenticated traffic to be redirected.
When you want all encrypted traffic to be redirected.
多选题
You want to create a security policy on an SRX240 that redirects unauthenticated users back to the Junos Pulse Access Control Service.Which two steps must you take to accomplish this task?（）
Configure a captive-portal service that redirects all traffic back to the Junos Pulse Access Control Service.
Configure a security policy that references the unified-access-control captive-portal service.
Configure a captive-portal service that redirects unauthenticated traffic back to the Junos Pulse Access Control Service.
Configure a security policy that references the unified-access-control intranet-controller service.
单选题
You are an administrator of a large campus network. Every switch on a floor within each building of your campus has been configured for a different VLAN. During implementation of the Junos Pulse Access Control Service, you must configure a RADIUS return attribute policy to apply a role representing a group of authenticated users that frequently transport their laptops from building to building and floor to floor. In the admin GUI, which policy element would you enable to accommodate these users?（）
Add Session-Timeout attribute with value equal to the session lifetime
Add Termination-Action attribute with value equal 1
VLAN
Open port
单选题
You are configuring an active/passive cluster of SRX Series devices as the firewall enforcer on a MAG Series device.Which statement is true?（）
Multiple Infranet Enforcer instances are created with a single serial number of an SRX Series device defined in each configuration.
A single Infranet Enforcer instance is created with both serial numbers of the clustered SRX Series devices defined in the configuration.
Multiple Infranet Enforcer instances are created with a single IP address of an SRX Series device defined in each configuration.
A single Infranet enforcer instance is created with the VIP of the clustered SRX Series device defined in the configuration.
单选题
What is a Host Enforcer policy?（）
A policy that is defined on the endpoint that permits or denies inbound or outbound traffic.
A policy that is sent to the endpoint that permits or denies inbound or outbound traffic.
A policy that is sent to the protected resource that permits or denies inbound or outbound traffic.
A policy that is defined on the protected resource that permits or denies inbound or outbound traffic.
单选题
In a Junos Pulse Access Control Service firewall enforcement configuration, what is the purpose of the source IP policy?（）
to specify the destination addresses to which access is permitted
to specify the source address permitted to access the resource
to specify the services to which access is permitted
to inform the enforcer to expect policy information from the Junos Pulse Access Control Service
