网友您好， 请在下方输入框内输入要搜索的题目：
题目内容
（请给出正确答案）
单选题
You have a MAG Series device with IP address 10.0.1.5 and hostname ad .pulse.local acting as an IF-MAP Federation server. The subject name of the device certificate on this server is ad .pulse.local.Which server URL must you configure on the IF-MAP clients communicating with this IF-MAP Federation server?（）
A
https://acl.pulse.local/dana-ws/soap/dsifmap
B
http://acl.pulse.local/dana-ws/soap/dsifmap
C
https://acl/dana-ws/soap/dsifmap
D
http://10.0.1.5/dana-ws/soap/dsifmap
参考答案
参考解析
解析：
暂无解析
更多 “单选题You have a MAG Series device with IP address 10.0.1.5 and hostname ad .pulse.local acting as an IF-MAP Federation server. The subject name of the device certificate on this server is ad .pulse.local.Which server URL must you configure on the IF-MAP clients communicating with this IF-MAP Federation server?（）A https://acl.pulse.local/dana-ws/soap/dsifmapB http://acl.pulse.local/dana-ws/soap/dsifmapC https://acl/dana-ws/soap/dsifmapD http://10.0.1.5/dana-ws/soap/dsifmap” 相关考题
考题
Interface ge-0/0/2.0 of your device is attached to the Internet and is configured with an IP address and network mask of 71.33.252.17/24. A Web server with IP address 10.20.20.1 is running an HTTP service on TCP port 8080. The Web server is attached to the ge-0/0/0.0 interface of your device. You must use NAT to make the Web server reachable from the Internet using port translation.Which type of NAT must you configure?（）A. source NAT with address shiftingB. pool-based source NATC. static destination NATD. pool-based destination NAT
考题
You have a MAG Series device with IP address 10.0.1.5 and hostname ad .pulse.local acting as an IF-MAP Federation server. The subject name of the device certificate on this server is ad .pulse.local.Which server URL must you configure on the IF-MAP clients communicating with this IF-MAP Federation server?（）A. https://acl.pulse.local/dana-ws/soap/dsifmapB. http://acl.pulse.local/dana-ws/soap/dsifmapC. https://acl/dana-ws/soap/dsifmapD. http://10.0.1.5/dana-ws/soap/dsifmap
考题
You have configured the Odyssey Access Client with a profile which has the "Disable Server Verification" setting cleared.What will be the result if the device certificate on the MAG Series device has expired and the user attempts to authenticate?（）A. The user will be instructed to call the network administrator.B. The user will fail authentication.C. The user will be prompted to install a new device certificate on the MAG Series device.D. The user will successfully authenticate and have full network access.
考题
Interface ge-0/0/2.0 of your device is attached to the Internet and is configured with an IP address and network mask of 71.33.252.17/24. A Web server with IP address 10.20.20.1 is running an HTTP service on TCP port 8080. The Web server is attached to the ge-0/0/0.0 interface of your device. You must use NAT to make the Web server reachable from the Internet using port translation. Which type of NAT must you configure?（）A、source NAT with address shiftingB、pool-based source NATC、static destination NATD、pool-based destination NAT
考题
You are the administrator of a Windows 2000 network. You install Windows 2000 Professional on a new computer and configure the TCP/IP settings to have a static IP address. While testing network connectivity from the new computer, you discover an error in the DNS server address that is configured in the TCP/IP settings. You configure the correct DNS server address, which is 10.1.1.5. However, you are still unable to successfully connect to network resources by name. You run the IPconfig/all command. The results indicate that the DNS server address is now configured as 0.0.0.0 You need to ensure that the computer can connect to network resources by name. What should you do?（）A、Stop and restart the DNS Client service.B、Add 10.1.1.5 to the DNS server list on the TCP/IP Advanced Properties tab.C、Add an A （host） record for the computer to the DNS server’s zone file.D、Configure your DHCP server to have a DNS server address of 10.1.1.5.
考题
You are installing a MAG Series device for access control using an SRX Series device as the firewall enforcer. The MAG Series device resides in the same security zone as users. However, the users reside in different subnets and use the SRX Series device as an IP gateway.Which statement is true?（）A、You must configure a security policy on the SRX Series device to allow traffic to flow from the user devices to the MAG Series device.B、No security policy is necessary on the SRX Series device to allow traffic to flow from the user devices to the MAG Series device.C、You must configure host-inbound traffic on the SRX Series device to allow SSL traffic between the MAG Series device and the user devices.D、You must configure host-inbound traffic on the SRX Series device to allow EAP traffic between the MAG Series device and the user devices.
考题
You are an administrator of an active/passive cluster of MAG Series devices running in mixed- mode configuration (IF-MAP server and authenticating users). The active user count is quickly approaching the maximum limit of the cluster. You have been directed to reconfigure the cluster to an active/active cluster and add a new license to increase the total number of active users the cluster can support. What must you do before changing the cluster configuration?（）A、Apply the new license to the passive node of the cluster.B、Configure an external load balancer to hold the V IP.C、Disable the active node in the cluster.D、Remove the IF-MAP server configuration.
考题
You have a MAG Series device with IP address 10.0.1.5 and hostname ad .pulse.local acting as an IF-MAP Federation server. The subject name of the device certificate on this server is ad .pulse.local.Which server URL must you configure on the IF-MAP clients communicating with this IF-MAP Federation server?（）A、https://acl.pulse.local/dana-ws/soap/dsifmapB、http://acl.pulse.local/dana-ws/soap/dsifmapC、https://acl/dana-ws/soap/dsifmapD、http://10.0.1.5/dana-ws/soap/dsifmap
考题
You are performing the initial setup of a new MAG Series device and have installed a valid CA- signed certificate on the MAG Series device. Connectivity to an existing SRX Series firewall enforcer cannot be obtained.What are two explanations for this behavior?（）A、The MAG Series device has multiple ports associated with the certificate.B、The MAG Series device's serial number needs to be configured on the SRX Series device.C、The SRX Series device must have a certificate signed by the same authority as the MAG Series device.D、The MAG Series device and SRX Series device are not synchronized to an NTP server.
考题
You have a VPN server that runs Windows Server 2003 Service Pack 2 (SP2). The VPN server is configured to have a static IP address pool. The IP address range is 10.10.10.1 to 10.10.10.200.All clients connect to the server by using PPTP. You discover that the VPN server supports only five concurrent VPN connections. You need to ensure that the VPN server supports 100 concurrent VPN connections. What should you do?（） A、From Network Interfaces, create a new demand-dial interface. B、From the properties of the server, disable multilink connections. C、From the port properties, configure the WAN Miniport (PPTP) device. D、From the properties of the server, configure the IP address assignment settings.
考题
Cer-tech .com has a server that runs Windows Server 2008. You have installed the Web Server （IIS） roleon it. Cer-tech plans to host multiple websites on the server. To achieve this you configure a single IPaddress on the server. You also configure all websites to be registered in DNS to point to the single IP address configured on the server. You have to make sure that each and every website responds only to thename requests from all client machines. What should you do to achieve this task？（）A、Configure the primary and secondary DNS to point to the server’s IP addressB、Configure a network address for each websiteC、Assign a unique port for each websiteD、Configure and assign a unique Host Header to each website
考题
You have an Active Directory forest named contoso.com.You install a new Exchange Server 2010 organization that contains a Client Access server named CAS1.You need to configure certificates in the organization to support the following client connections： （1）Autodiscover （2）Outlook Anywhere （3）Exchange ActiveSync What should you do？（）A、Reissue a self-signed certificate to CAS1.B、Configure the default Web site on CAS1 to require SSL.C、Issue a trusted certificate that contains multiple subject alternate names.D、Install Active Directory Rights Management Service （AD RMS） on a member server.
考题
You deploy a new Active Directory Federation Services （AD FS） federation server. You request new certificates for the AD FS federation server. You need to ensure that the AD FS federation server can use the new certificates. To which certificate store should you import the certificates（）A、ComputerB、IIS Admin Service service accountC、Local AdministratorD、World Wide Web Publishing Service service account
考题
As an administrator at Certkiller.com， you have installed an Active Directory forest that has a single domain. You have installed an Active Directory Federation services （AD FS） on the domain member server. What should you do to configure AD FS to make sure that AD FS token contains information from the active directory domain（）A、Add a new account store and configure it.B、Add a new resource partner and configure itC、Add a new resource store and configure itD、Add a new administrator account on AD FS and configure itE、None of the above
考题
You have a server that runs Windows Server 2008. The Web Server （IIS） role is installed. You plan to host multiple Web sites on the server. You configure a single IP address for the server. All Web sites are registered in DNS to point to the single IP address. You need to ensure that each Web site only responds to requests by name from all client computers. What should you do？（）A、Configue a unique port for each Web site.B、Configue a unique IP address for each Web site.C、Configue a unique Host Header for each Web site.D、Edit the Hosts file on the server to add all the Web site names associated to the network address.
考题
单选题You deploy an Active Directory Federation Services （AD FS） Federation Service Proxy on a server named Server1. You need to configure the Windows Firewall on Server1 to allow external users to authenticate by using AD FS. Which inbound TCP port should you allow on Server1（）A
88B
135C
443D
445
考题
单选题You deploy a new Active Directory Federation Services （AD FS） federation server. You request new certificates for the AD FS federation server. You need to ensure that the AD FS federation server can use the new certificates. To which certificate store should you import the certificates（）A
ComputerB
IIS Admin Service service accountC
Local AdministratorD
World Wide Web Publishing Service service account
考题
多选题You are performing the initial setup of a new MAG Series device and have installed a valid CA- signed certificate on the MAG Series device. Connectivity to an existing SRX Series firewall enforcer cannot be obtained.What are two explanations for this behavior?（）AThe MAG Series device has multiple ports associated with the certificate.BThe MAG Series device's serial number needs to be configured on the SRX Series device.CThe SRX Series device must have a certificate signed by the same authority as the MAG Series device.DThe MAG Series device and SRX Series device are not synchronized to an NTP server.
考题
单选题Cer-tech .com has a server that runs Windows Server 2008. You have installed the Web Server （IIS） roleon it. Cer-tech plans to host multiple websites on the server. To achieve this you configure a single IPaddress on the server. You also configure all websites to be registered in DNS to point to the single IP address configured on the server. You have to make sure that each and every website responds only to thename requests from all client machines. What should you do to achieve this task？（）A
Configure the primary and secondary DNS to point to the server’s IP addressB
Configure a network address for each websiteC
Assign a unique port for each websiteD
Configure and assign a unique Host Header to each website
考题
单选题You are installing a MAG Series device for access control using an SRX Series device as the firewall enforcer. The MAG Series device resides in the same security zone as users. However, the users reside in different subnets and use the SRX Series device as an IP gateway.Which statement is true?（）A
You must configure a security policy on the SRX Series device to allow traffic to flow from the user devices to the MAG Series device.B
No security policy is necessary on the SRX Series device to allow traffic to flow from the user devices to the MAG Series device.C
You must configure host-inbound traffic on the SRX Series device to allow SSL traffic between the MAG Series device and the user devices.D
You must configure host-inbound traffic on the SRX Series device to allow EAP traffic between the MAG Series device and the user devices.
考题
单选题You have configured the Odyssey Access Client with a profile which has the "Disable Server Verification" setting cleared.What will be the result if the device certificate on the MAG Series device has expired and the user attempts to authenticate?（）A
The user will be instructed to call the network administrator.B
The user will fail authentication.C
The user will be prompted to install a new device certificate on the MAG Series device.D
The user will successfully authenticate and have full network access.
考题
单选题You have a VPN server that runs Windows Server 2003 Service Pack 2 (SP2). The VPN server is configured to have a static IP address pool. The IP address range is 10.10.10.1 to 10.10.10.200. All clients connect to the server by using PPTP. You discover that the VPN server supports only five concurrent VPN connections. You need to ensure that the VPN server supports 100 concurrent VPN connections. What should you do?（）A
From Network Interfaces， create a new demand-dial interface.B
From the properties of the server， disable multilink connections.C
From the port properties， configure the WAN Miniport （PPTP） device.D
From the properties of the server， configure the IP address assignment settings.
考题
单选题As an administrator at Certkiller.com， you have installed an Active Directory forest that has a single domain. You have installed an Active Directory Federation services （AD FS） on the domain member server. What should you do to configure AD FS to make sure that AD FS token contains information from the active directory domain（）A
Add a new account store and configure it.B
Add a new resource partner and configure itC
Add a new resource store and configure itD
Add a new administrator account on AD FS and configure itE
None of the above
考题
单选题You have a server that runs Windows Server 2008. The Web Server （IIS） role is installed. You plan to host multiple Web sites on the server. You configure a single IP address for the server. All Web sites are registered in DNS to point to the single IP address. You need to ensure that each Web site only responds to requests by name from all client computers. What should you do？（）A
Configue a unique port for each Web site.B
Configue a unique IP address for each Web site.C
Configue a unique Host Header for each Web site.D
Edit the Hosts file on the server to add all the Web site names associated to the network address.
考题
单选题Interface ge-0/0/2.0 of your device is attached to the Internet and is configured with an IP address and network mask of 71.33.252.17/24. A Web server with IP address 10.20.20.1 is running an HTTP service on TCP port 8080. The Web server is attached to the ge-0/0/0.0 interface of your device. You must use NAT to make the Web server reachable from the Internet using port translation. Which type of NAT must you configure?（）A
source NAT with address shiftingB
pool-based source NATC
static destination NATD
pool-based destination NAT
考题
单选题You are the administrator of a Windows 2000 network. You install Windows 2000 Professional on a new computer and configure the TCP/IP settings to have a static IP address. While testing network connectivity from the new computer, you discover an error in the DNS server address that is configured in the TCP/IP settings. You configure the correct DNS server address, which is 10.1.1.5. However, you are still unable to successfully connect to network resources by name. You run the IPconfig/all command. The results indicate that the DNS server address is now configured as 0.0.0.0 You need to ensure that the computer can connect to network resources by name. What should you do?（）A
Stop and restart the DNS Client service.B
Add 10.1.1.5 to the DNS server list on the TCP/IP Advanced Properties tab.C
Add an A （host） record for the computer to the DNS server’s zone file.D
Configure your DHCP server to have a DNS server address of 10.1.1.5.
考题
单选题You are an administrator of an active/passive cluster of MAG Series devices running in mixed- mode configuration (IF-MAP server and authenticating users). The active user count is quickly approaching the maximum limit of the cluster. You have been directed to reconfigure the cluster to an active/active cluster and add a new license to increase the total number of active users the cluster can support. What must you do before changing the cluster configuration?（）A
Apply the new license to the passive node of the cluster.B
Configure an external load balancer to hold the V IP.C
Disable the active node in the cluster.D
Remove the IF-MAP server configuration.
热门标签
最新试卷