网友您好， 请在下方输入框内输入要搜索的题目：
题目内容
（请给出正确答案）
多选题
Regarding an IPsec security association （SA）， which two statements are true？（）
A
IKE SA is bidirectional.
B
IPsec SA is bidirectional.
C
IKE SA is established during phase 2 negotiations.
D
IPsec SA is established during phase 2 negotiations.
参考答案
参考解析
解析：
暂无解析
更多 “多选题Regarding an IPsec security association （SA）， which two statements are true？（）AIKE SA is bidirectional.BIPsec SA is bidirectional.CIKE SA is established during phase 2 negotiations.DIPsec SA is established during phase 2 negotiations.” 相关考题
考题
Which two statements are true regarding the system－default security policy [edit security policies default－policy]?()(Choose two.)
A. Traffic is permitted from the trust zone to the untrust zone.B. Intrazone traffic in the trust zone is permitted.C. All traffic through the device is denied.D. The policy is matched only when no other matching policies are found.
考题
Which statement is true regarding IPsec VPNs?()
A. There are five phases of IKE negotiation.B. There are two phases of IKE negotiation.C. IPsec VPN tunnels are not supported on SRX Series devices.D. IPsec VPNs require a tunnel PIC in SRX Series devices.
考题
Which two parameters are configured in IPsec policy? ()(Choose two.)
A. modeB. IKE gatewayC. security proposalD. Perfect Forward Secrecy
考题
Which two of these are advantages of placing the VPN device parallel to the firewall?()
A. high scalabilityB. the design supports a layered security modelC. firewall addressing does not need to changeD. IPsec decrypted traffic is inspected by the firewallE. there is a centralized point for logging and content inspection
考题
IPsec, also known as the internet Protocol ( ) , defines the architecture for security services for IP network traffic IPsec describes the framework for providing security a the IP layer, as well as the suite of protocols designed to provide that security: through_ ( )_ and encryption of IP network packets. IPec can be used 10 protect network data, for example, by setting up circuits using IPsec ( ), in which all data being sent between two endpoints is encrypted, as with a Virtual (请作答此空) Network connection ;for encrypting application layer data ;and for providing security for routers sending routing data across the public internet. Internet traffic can also be secured from host to host without the use of IPsec, for example by encryption at the ( ) layer with HTTP Secure (TTPS)or an the transport layer wit the Transport Layer Security (TLS)protocol.A.pubic]
B.private]
C.personal
D.proper
考题
Which of the following commands will display a router’s crypto map IPsec security associationsettings？（）A、show crypto map ipsec saB、show crypto mapC、show crypto engine connections activeD、show ipsec crypto mapE、show crypto map saF、show ipsec crypto map sa
考题
Which two statements regarding firewall user authentication client groups are true?（） (Choose two.)A、A client group is a list of clients associated with a group.B、A client group is a list of groups associated with a client.C、Client groups are referenced in security policy in the same manner in which individual clients are referenced.D、Client groups are used to simplify configuration by enabling firewall user authentication without security policy.
考题
IPSec VPN is a widely-acknowledged solution for enterprise network. Which three IPsec VPNstatements are true？（）A、IKE keepalives are unidirectional and sent every ten secondsB、IPsec uses the Encapsulating Security Protocol （ESP） or the Authentication Header （AH）protocol for exchanging keysC、To establish IKE SA, main mode utilizes six packets while aggressive mode utilizes only threepacketsD、IKE uses the Diffie-Hellman algorithm to generate symmetrical keys to be used by IPsec peers
考题
Which two parameters are configured in IPsec policy？（）A、modeB、IKE gatewayC、security proposalD、Perfect Forward Secrecy
考题
Which two configuration elements are required for a policy-based VPN？（）A、IKE gatewayB、secure tunnel interfaceC、security policy to permit the IKE trafficD、security policy referencing the IPsec VPN tunnel
考题
Which two statements are true regarding firewall user authentication?（） (Choose two.)A、When configured for pass-through firewall user authentication, the user must first open a connection to the Junos security remote network resource.B、When configured for Web firewall user authentication only, the user must first open a connection to the Junos security remote network resource.C、If a Junos security device is configured for pass-through firewall user authentication, new sessions are automatically intercepted .D、If a Junos security device is configured for Web firewall user authentication, new sessions are automatically intercepted.
考题
关于IPSec SA和IKE SA的说法，正确的是（）A、IPSec SA是双向的，IKE SA是单向的B、IPSec SA是双向的，IKE SA是双向的C、IPSec SA是单向的，IKE SA是单向的D、IPSec SA是单向的，IKE SA是双向的
考题
关于IPSec安全联盟（Security Association）的说法正确的是（）。A、IPSec对数据流提供的安全服务通过安全联盟SA来实现B、一个安全联盟SA就是两个IPSec系统之间的一个单向逻辑连接C、输入数据流和输出数据流由输入安全联盟与输出安全联盟分别处理D、安全联盟可通过手工配置和自动协商两种方式建立
考题
Which two of these are advantages of placing the VPN device parallel to the firewall？（）A、 high scalabilityB、 the design supports a layered security modelC、 firewall addressing does not need to changeD、 IPsec decrypted traffic is inspected by the firewallE、 there is a centralized point for logging and content inspection
考题
Which two parameters are configured in IPsec policy? （）(Choose two.)A、modeB、IKE gatewayC、security proposalD、Perfect Forward Secrecy
考题
Which statement is true regarding IPsec VPNs?（）A、There are five phases of IKE negotiation.B、There are two phases of IKE negotiation.C、IPsec VPN tunnels are not supported on SRX Series devices.D、IPsec VPNs require a tunnel PIC in SRX Series devices.
考题
Which two statements are true regarding the system-default security policy [edit security policies default-policy]?（）(Choose two.)A、Traffic is permitted from the trust zone to the untrust zone.B、Intrazone traffic in the trust zone is permitted.C、All traffic through the device is denied.D、The policy is matched only when no other matching policies are found.
考题
Regarding an IPsec security association （SA）， which two statements are true？（）A、IKE SA is bidirectional.B、IPsec SA is bidirectional.C、IKE SA is established during phase 2 negotiations.D、IPsec SA is established during phase 2 negotiations.
考题
Which two configuration elements are required for a route-based VPN？（）A、secure tunnel interfaceB、security policy to permit the IKE trafficC、a route for the tunneled transit trafficD、tunnel policy for transit traffic referencing the IPsec VPN
考题
多选题Which two statements are true regarding proxy ARP？（）AProxy ARP is enabled by default.BProxy ARP is not enabled by default.CJUNOS security devices can forward ARP requests to a remote device when proxy ARP is enabled.DJUNOS security devices can reply to ARP requests intended for a remote device when proxy ARP is enabled
考题
多选题Which two statements are true regarding IDP？（）AIDP can be used in conjunction with other JUNOS Software security features such as SCREEN options，zones， and security policy.BIDP cannot be used in conjunction with other JUNOS Software security features such as SCREEN options， zones， and security policy.CIDP inspects traffic up to the Presentation layer.DIDP inspects traffic up to the Application layer.
考题
多选题Which two statements regarding firewall user authentication client groups are true?（） (Choose two.)AA client group is a list of clients associated with a group.BA client group is a list of groups associated with a client.CClient groups are referenced in security policy in the same manner in which individual clients are referenced.DClient groups are used to simplify configuration by enabling firewall user authentication without security policy.
考题
单选题Which of the following commands will display a router’s crypto map IPsec security associationsettings？（）A
show crypto map ipsec saB
show crypto mapC
show crypto engine connections activeD
show ipsec crypto mapE
show crypto map saF
show ipsec crypto map sa
考题
多选题Which two statements regarding firewall user authentication client groups are true？（）AIndividual clients are configured under client groups in the configuration hierarchy.BClient groups are configured under individual clients in the configuration hierarchy.CClient groups are referenced in security policy in the same manner in which individual clients are referenced.DClient groups are used to simplify configuration by enabling firewall user authentication without security policy.
考题
单选题Which statement is true regarding IPsec VPNs?（）A
There are five phases of IKE negotiation.B
There are two phases of IKE negotiation.C
IPsec VPN tunnels are not supported on SRX Series devices.D
IPsec VPNs require a tunnel PIC in SRX Series devices.
考题
单选题Which operational mode command displays all active IPsec phase 2 security associations？（）A
show ike security-associationsB
show ipsec security-associationsC
show security ike security-associationsD
show security ipsec security-associations
考题
多选题IPSec VPN is a widely-acknowledged solution for enterprise network. Which three IPsec VPNstatements are true？（）AIKE keepalives are unidirectional and sent every ten secondsBIPsec uses the Encapsulating Security Protocol （ESP） or the Authentication Header （AH）protocol for exchanging keysCTo establish IKE SA, main mode utilizes six packets while aggressive mode utilizes only threepacketsDIKE uses the Diffie-Hellman algorithm to generate symmetrical keys to be used by IPsec peers
热门标签
最新试卷