网友您好， 请在下方输入框内输入要搜索的题目：
题目内容
（请给出正确答案）
单选题
Which statement describes a security zone?（）
A
A security zone can contain one or more interfaces.
B
A security zone can contain interfaces in multiple routing instances.
C
A security zone must contain two or more interfaces.
D
A security zone must contain bridge groups.
参考答案
参考解析
解析：
暂无解析
更多 “单选题Which statement describes a security zone?（）A A security zone can contain one or more interfaces.B A security zone can contain interfaces in multiple routing instances.C A security zone must contain two or more interfaces.D A security zone must contain bridge groups.” 相关考题
考题
Which two statements are true regarding the system－default security policy [edit security policies default－policy]?()(Choose two.)
A. Traffic is permitted from the trust zone to the untrust zone.B. Intrazone traffic in the trust zone is permitted.C. All traffic through the device is denied.D. The policy is matched only when no other matching policies are found.
考题
In the Junos OS, which statement is true?()
A. vlan.0 belongs to the untrust zone.B. You must configure Web authentication to allow inbound traffic in the untrust zone.C. The zone name untrust has no special meaning.D. The untrust zone is not configurable.
考题
At which two levels of the Junos CLI hierarchy is the host－inbound－traffic command configured? ()(Choose two.)
A. [edit security idp]B. [edit security zones security-zone trust interfaces ge-0/0/0.0]C. [edit security zones security-zone trust]D. [edit security screen]
考题
Which statement describes a security zone?()
A. A security zone can contain one or more interfaces.B. A security zone can contain interfaces in multiple routing instances.C. A security zone must contain two or more interfaces.D. A security zone must contain bridge groups.
考题
Which statement best describes Cisco IOS Zone-Based Policy Firewall？（）A、A router interface can belong to multiple zones.B、Policy maps are used to classify traffic into different traffic classes， and class maps are used to assignaction to the traffic classes.C、The pass action works in only one directionD、A zone-pair is bidirectional because it specifies traffic flowing among the interfaces within the zone-pair in both directions.
考题
Which type of zone is used by traffic transiting the device？（）A、transit zoneB、default zoneC、security zoneD、functional zone
考题
You want to allow your device to establish OSPF adjacencies with a neighboring device connected to interface ge-0/0/3.0. Interface ge-0/0/3.0 is a member of the HR zone.Under which configuration hierarchy must you permit OSPF traffic?（）A、[edit security policies from-zone HR to-zone HR]B、[edit security zones functional-zone management protocols]C、[edit security zones protocol-zone HR host-inbound-traffic]D、[edit security zones security-zone HR host-inbound-traffic protocols]
考题
Which statement describes the behavior of a security policy？（）A、The implicit default security policy permits all traffic.B、Traffic destined to the device itself always requires a security policy.C、Traffic destined to the device’s incoming interface does not require a security policy.D、The factory-default configuration permits all traffic from all interfaces.
考题
As an experienced Network Engineer, you are required to implement the security architecture assessment. Which of the following statement describes the most important reason for that?（）A、Create a design specification document.B、Integrate routing and switching components.C、Document power and UPS availabilityD、Document the customer's current and future technology projects.
考题
In the Junos OS, which statement is true?（）A、vlan.0 belongs to the untrust zone.B、You must configure Web authentication to allow inbound traffic in the untrust zone.C、The zone name "untrust" has no special meaning.D、The untrust zone is not configurable.
考题
What is the purpose of a zone in JUNOS Software？（）A、A zone defines a group of security devices with a common management.B、A zone defines the geographic region in which the security device is deployed.C、A zone defines a group of network segments with similar security requirements.D、A zone defines a group of network segments with similar class-of-service requirements.
考题
At which two levels of the Junos CLI hierarchy is the host-inbound-traffic command configured? （）(Choose two.)A、[edit security idp]B、[edit security zones security-zone trust interfaces ge-0/0/0.0]C、[edit security zones security-zone trust]D、[edit security screen]
考题
Regarding secure tunnel （st） interfaces， which statement is true？（）A、You cannot assign st interfaces to a security zone.B、You cannot apply static NAT on an st interface logical unit.C、st interfaces are optional when configuring a route-based VPND、A static route can reference the st interface logical unit as the next-hop
考题
Which two statements are true regarding the system-default security policy [edit security policies default-policy]?（）(Choose two.)A、Traffic is permitted from the trust zone to the untrust zone.B、Intrazone traffic in the trust zone is permitted.C、All traffic through the device is denied.D、The policy is matched only when no other matching policies are found.
考题
Regarding zone types， which statement is true？（）A、You cannot assign an interface to a functional zone.B、You can specifiy a functional zone in a security policy.C、Security zones must have a scheduler applied.D、You can use a security zone for traffic destined for the device itself.
考题
单选题Which security or functional zone name has special significance to the Junos OS?（）A
selfB
trustC
untrustD
junos-global
考题
单选题Which statement describes a security zone?（）A
A security zone can contain one or more interfaces.B
A security zone can contain interfaces in multiple routing instances.C
A security zone must contain two or more interfaces.D
A security zone must contain bridge groups.
考题
单选题You have configured a UTM profile called Block-Spam, which has the appropriate antispam configuration to block undesired spam e-mails.Which configuration would protect an SMTP server in the dmz zone from spam originating in the untrust zone?（）A
set security policies from-zone dmz to-zone untrust policy anti-spam then permit application- services utm-policy Block-SpamB
set security policies from-zone untrust to-zone dmz policy anti-spam then permit application- services utm-policy Block-SpamC
set security policies from-zone untrust to-zone dmz policy anti-spam then permit application- services anti-spam-policyD
set security policies from-zone untrust to-zone dmz policy anti-spam then permit application- services Block-Spam
考题
单选题Which statement accurately describes firewall user authentication？（）A
Firewall user authentication provides another layer of security in a network.B
Firewall user authentication provides a means for accessing a JUNOS Software-based security device.C
Firewall user authentication enables session-based forwarding.D
Firewall user authentication is used as a last resort security method in a network.
考题
单选题In the Junos OS, which statement is true?（）A
vlan.0 belongs to the untrust zone.B
You must configure Web authentication to allow inbound traffic in the untrust zone.C
The zone name untrust has no special meaning.D
The untrust zone is not configurable.
考题
多选题Which two steps are performed when configuring a zone？（）ADefine a default policy for the zone.BAssign logical interfaces to the zone.CAssign physical interfaces to the zone.DDefine the zone as a security or functional zone
考题
单选题Click the Exhibit button. Based on the exhibit, client PC 192.168.10.10 cannot ping 1.1.1.2. Which is a potential cause for this problem?（）A
The untrust zone does not have a management policy configured.B
The trust zone does not have ping enabled as host-inbound-traffic service.C
The security policy from the trust zone to the untrust zone does not permit ping.D
No security policy exists for the ICMP reply packet from the untrust zone to the trust zone.
考题
单选题Which statement best describes Cisco IOS Zone-Based Policy Firewall？（）A
A router interface can belong to multiple zones.B
Policy maps are used to classify traffic into different traffic classes， and class maps are used to assignaction to the traffic classes.C
The pass action works in only one directionD
A zone-pair is bidirectional because it specifies traffic flowing among the interfaces within the zone-pair in both directions.
考题
多选题At which two levels of the Junos CLI hierarchy is the host-inbound-traffic command configured? （）(Choose two.)A[edit security idp]B[edit security zones security-zone trust interfaces ge-0/0/0.0]C[edit security zones security-zone trust]D[edit security screen]
考题
单选题Which statement describes the behavior of a security policy？（）A
The implicit default security policy permits all traffic.B
Traffic destined to the device itself always requires a security policy.C
Traffic destined to the device’s incoming interface does not require a security policy.D
The factory-default configuration permits all traffic from all interfaces.
考题
单选题What is the purpose of a zone in JUNOS Software？（）A
A zone defines a group of security devices with a common management.B
A zone defines the geographic region in which the security device is deployed.C
A zone defines a group of network segments with similar security requirements.D
A zone defines a group of network segments with similar class-of-service requirements.
考题
单选题Regarding zone types， which statement is true？（）A
You cannot assign an interface to a functional zone.B
You can specifiy a functional zone in a security policy.C
Security zones must have a scheduler applied.D
You can use a security zone for traffic destined for the device itself.
考题
单选题You want to allow your device to establish OSPF adjacencies with a neighboring device connected to interface ge-0/0/3.0. Interface ge-0/0/3.0 is a member of the HR zone.Under which configuration hierarchy must you permit OSPF traffic?（）A
[edit security policies from-zone HR to-zone HR]B
[edit security zones functional-zone management protocols]C
[edit security zones protocol-zone HR host-inbound-traffic]D
[edit security zones security-zone HR host-inbound-traffic protocols]
热门标签
最新试卷