网友您好， 请在下方输入框内输入要搜索的题目：
题目内容
（请给出正确答案）
Which two steps are performed when configuring a zone？（）
- A、Define a default policy for the zone.
- B、Assign logical interfaces to the zone.
- C、Assign physical interfaces to the zone.
- D、Define the zone as a security or functional zone
参考答案
更多 “Which two steps are performed when configuring a zone？（）A、Define a default policy for the zone.B、Assign logical interfaces to the zone.C、Assign physical interfaces to the zone.D、Define the zone as a security or functional zone” 相关考题
考题
Which two statements are true regarding the system－default security policy [edit security policies default－policy]?()(Choose two.)
A. Traffic is permitted from the trust zone to the untrust zone.B. Intrazone traffic in the trust zone is permitted.C. All traffic through the device is denied.D. The policy is matched only when no other matching policies are found.
考题
You want to create an out－of－band management zone and assign the ge－0／0／0.0 interface to that zone.From the [edit] hierarchy, which command do you use to configure this assignment?()
A. set security zones management interfaces ge-0/0/0.0B. set zones functional-zone management interfaces ge-0/0/0.0C. set security zones functional-zone management interfaces ge-0/0/0.0D. set security zones functional-zone out-of-band interfaces ge-0/0/0.0
考题
At which two levels of the Junos CLI hierarchy is the host－inbound－traffic command configured? ()(Choose two.)
A. [edit security idp]B. [edit security zones security-zone trust interfaces ge-0/0/0.0]C. [edit security zones security-zone trust]D. [edit security screen]
考题
Users can define policy to control traffic flow between which two components? ()(Choose two.)
A. from a zone to the router itselfB. from a zone to the same zoneC. from a zone to a different zoneD. from one interface to another interface
考题
What are two step needed to define a QoS policy for a traffic class？（）A、determine a minimum bandwidth guaranteeB、determine interfaces to which to apply policyC、assign priorities to the classD、configure access control lists
考题
Which type of zone is used by traffic transiting the device？（）A、transit zoneB、default zoneC、security zoneD、functional zone
考题
What are two steps needed to define a QoS policy for a traffic class？（）A、 Determine a minimum bandwidth guarantee.B、 Determine interfaces to which to apply policy.C、 Assign priorities to the class.D、 Configure access control lists.
考题
In the Junos OS, which statement is true?（）A、vlan.0 belongs to the untrust zone.B、You must configure Web authentication to allow inbound traffic in the untrust zone.C、The zone name "untrust" has no special meaning.D、The untrust zone is not configurable.
考题
Which two statements describe the purpose of a security policy？（）A、It enables traffic counting and logging.B、It enforces a set of rules for transit traffic.C、It controls host inbound services on a zone.D、It controls administrator rights to access the device.
考题
At which two levels of the Junos CLI hierarchy is the host-inbound-traffic command configured? （）(Choose two.)A、[edit security idp]B、[edit security zones security-zone trust interfaces ge-0/0/0.0]C、[edit security zones security-zone trust]D、[edit security screen]
考题
Users can define policy to control traffic flow between which two components？（）A、from a zone to the device itselfB、from a zone to the same zoneC、from a zone to a different zoneD、from one interface to another interface
考题
Which statement describes a security zone?（）A、A security zone can contain one or more interfaces.B、A security zone can contain interfaces in multiple routing instances.C、A security zone must contain two or more interfaces.D、A security zone must contain bridge groups.
考题
Regarding secure tunnel （st） interfaces， which statement is true？（）A、You cannot assign st interfaces to a security zone.B、You cannot apply static NAT on an st interface logical unit.C、st interfaces are optional when configuring a route-based VPND、A static route can reference the st interface logical unit as the next-hop
考题
You want to create an out-of-band management zone and assign the ge-0/0/0.0 interface to that zone.From the [edit] hierarchy, which command do you use to configure this assignment?（）A、set security zones management interfaces ge-0/0/0.0B、set zones functional-zone management interfaces ge-0/0/0.0C、set security zones functional-zone management interfaces ge-0/0/0.0D、set security zones functional-zone out-of-band interfaces ge-0/0/0.0
考题
Users can define policy to control traffic flow between which two components? （）(Choose two.)A、from a zone to the router itselfB、from a zone to the same zoneC、from a zone to a different zoneD、from one interface to another interface
考题
Which two statements are true regarding the system-default security policy [edit security policies default-policy]?（）(Choose two.)A、Traffic is permitted from the trust zone to the untrust zone.B、Intrazone traffic in the trust zone is permitted.C、All traffic through the device is denied.D、The policy is matched only when no other matching policies are found.
考题
Regarding zone types， which statement is true？（）A、You cannot assign an interface to a functional zone.B、You can specifiy a functional zone in a security policy.C、Security zones must have a scheduler applied.D、You can use a security zone for traffic destined for the device itself.
考题
Your company， A. Datum Corporation， has a single Active Directory domain named intranet.adatum.com. The domain has two domain controllers that run Windows Server 2008 R2 operating system. The domain controllers also run DNS servers. The intranet.adatum.com DNS zone is configured as an Active Directory-integrated zone with the Dynamic updates setting configured to Secure only. A new corporate security policy requires that the intranet.adatum.com DNS zone must be updated only by domain controllers or member servers. You need to configure the intranet.adatum.com zone to meet the new security policy requirement. Which two actions should you perform（）A、Remove the Authenticated Users account from the Security tab of the intranet.adatum.com DNS zone properties.B、Assign the SELF Account Deny on Write permission on the Security tab of the intranet.adatum.com DNS zone propC、Assign the server computer accounts the Allow on Write All Properties permission on the Security tab of the intraneD、Assign the server computer accounts the Allow on Create All Child Objects permission on the Security tab of the int
考题
Your company， A. Datum Corporation， has a single Active Directory domain named intranet.adatum.com. The domain has two domain controllers that run Windows Server 2008 R2 operating system. The domain controllers also run DNS servers. The intranet.adatum.com DNS zone is configured as an Active Directoryintegrated zone with the Dynamic updates setting configured to Secure only. A new corporate security policy requires that the intranet.adatum.com DNS zone must be updated only by domain controllers or member servers. You need to configure the intranet.adatum.com zone to meet the new security policy requirement. Which two actions should you perform（）A、Remove the Authenticated Users account from the Security tab of the intranet.adatum.com DNS zone properties.B、Assign the SELF Account Deny on Write permission on the Security tab of the intranet.adatum.com DNS zone properties.C、Assign the server computer accounts the Allow on Write All Properties permission on the Security tab of the intranet.adatum.com DNS zone properties.D、Assign the server computer accounts the Allow on Create All Child Objects permission on the Security tab of the intranet.adatum.com DNS zone properties.
考题
Your company has two domain controllers that are configured as internal DNS servers. All zones on the DNS servers are Active Directory-integrated zones. The zones allow all dynamic updates. You discover that the contoso.com zone has multiple entries for the host names of computers that do not exist. You need to configure the contoso.com zone to automatically remove expired records. What should you do（）A、Enable only secure updates on the contoso.com zone.B、Enable scavenging and configure the refresh interval on the contoso.com zone.C、From the Start of Authority tab， decrease the default refresh interval on the contoso.com zone.D、From the Start of Authority tab， increase the default expiration interval on the contoso.com zone.
考题
Your company has two domain controllers that are configured as internal DNS servers. All zones on The safer , easier way to help you pass any IT exams. 6 / 90 the DNS servers are Active Directory-integrated zones. The zones allow all dynamic updates. You discover that the contoso.com zone has multiple entries for the host names of computers that do not exist. You need to configure the contoso.com zone to automatically remove expired records. What should you do（） A、Enable only secure updates on the contoso.com zone.B、Enable scavenging and configure the refresh interval on the contoso.com zone.C、From the Start of Authority tab， decrease the default refresh interval on the contoso.com zone.D、From the Start of Authority tab， increase the default expiration interval on the contoso.com zone.
考题
多选题What are two steps needed to define a QoS policy for a traffic class？（）ADetermine a minimum bandwidth guarantee.BDetermine interfaces to which to apply policy.CAssign priorities to the class.DConfigure access control lists.
考题
单选题Which statement describes a security zone?（）A
A security zone can contain one or more interfaces.B
A security zone can contain interfaces in multiple routing instances.C
A security zone must contain two or more interfaces.D
A security zone must contain bridge groups.
考题
多选题At which two levels of the Junos CLI hierarchy is the host-inbound-traffic command configured? （）(Choose two.)A[edit security idp]B[edit security zones security-zone trust interfaces ge-0/0/0.0]C[edit security zones security-zone trust]D[edit security screen]
考题
单选题Regarding zone types， which statement is true？（）A
You cannot assign an interface to a functional zone.B
You can specifiy a functional zone in a security policy.C
Security zones must have a scheduler applied.D
You can use a security zone for traffic destined for the device itself.
考题
多选题Which two steps are performed when configuring a zone？（）ADefine a default policy for the zone.BAssign logical interfaces to the zone.CAssign physical interfaces to the zone.DDefine the zone as a security or functional zone
考题
单选题Regarding secure tunnel （st） interfaces， which statement is true？（）A
You cannot assign st interfaces to a security zone.B
You cannot apply static NAT on an st interface logical unit.C
st interfaces are optional when configuring a route-based VPND
A static route can reference the st interface logical unit as the next-hop
热门标签
最新试卷