网友您好， 请在下方输入框内输入要搜索的题目：
题目内容
（请给出正确答案）
多选题
Which two statements are true for a security policy? （）(Choose two.)
A
It controls inter-zone traffic.
B
It controls intra-zone traffic.
C
It is named with a system-defined name.
D
It controls traffic destined to the device's ingress interface.
参考答案
参考解析
解析：
暂无解析
更多 “多选题Which two statements are true for a security policy? （）(Choose two.)AIt controls inter-zone traffic.BIt controls intra-zone traffic.CIt is named with a system-defined name.DIt controls traffic destined to the device's ingress interface.” 相关考题
考题
Which two statements are true regarding the system－default security policy [edit security policies default－policy]?()(Choose two.)
A. Traffic is permitted from the trust zone to the untrust zone.B. Intrazone traffic in the trust zone is permitted.C. All traffic through the device is denied.D. The policy is matched only when no other matching policies are found.
考题
Which two statements are true with regard to policy ordering? ()(Choose two.)
A. The last policy is the default policy, which allows all traffic.B. The order of policies is not important.C. New policies are placed at the end of the policy list.D. The insert command can be used to change the order.
考题
Which two statements are true about precedence values in policy?() (Choose two.)
A. 1 is the default precedence.B. A lower number is preferred.C. A higher number is preferred.D. 100 is the default precedence.
考题
Which two statements are true regarding routing policy processing?()
A. The Junos OS verifies the match criteria of each policy in order and performs the associated action when a match occurs.B. Policies are evaluated from right to left as displayed in the Junos OS configuration file.C. Polices are evaluated based on the order in which they are applied to a routing protocol.D. Policy processing stops once the last statement in the policy is evaluated.
考题
Which two statements regarding firewall user authentication client groups are true?（） (Choose two.)A、A client group is a list of clients associated with a group.B、A client group is a list of groups associated with a client.C、Client groups are referenced in security policy in the same manner in which individual clients are referenced.D、Client groups are used to simplify configuration by enabling firewall user authentication without security policy.
考题
Which two parameters are configured in IPsec policy？（）A、modeB、IKE gatewayC、security proposalD、Perfect Forward Secrecy
考题
Which two configuration elements are required for a policy-based VPN？（）A、IKE gatewayB、secure tunnel interfaceC、security policy to permit the IKE trafficD、security policy referencing the IPsec VPN tunnel
考题
Which two statements are true about terms in a routing policy?（）A、A routing policy cannot have more than one term.B、If a term does not contain a from statement, all routes match.C、If a term does not contain a from statement, the Junos OS will not commit.D、A then statement is not mandatory in a term.
考题
Which two statements about the use of VLANs to segment a network are true? （）A、VLANs increase the size of collision domains.B、VLANs allow logical grouping of users by function.C、VLANs simplify switch administration.D、VLANs enhance network security.
考题
Which two statements describe the purpose of a security policy？（）A、It enables traffic counting and logging.B、It enforces a set of rules for transit traffic.C、It controls host inbound services on a zone.D、It controls administrator rights to access the device.
考题
Which two statements are true for a security policy? （）(Choose two.)A、It controls inter-zone traffic.B、It controls intra-zone traffic.C、It is named with a system-defined name.D、It controls traffic destined to the device's ingress interface.
考题
Which two parameters are configured in IPsec policy? （）(Choose two.)A、modeB、IKE gatewayC、security proposalD、Perfect Forward Secrecy
考题
Which two statements are true about precedence values in policy?（） (Choose two.)A、1 is the default precedence.B、A lower number is preferred.C、A higher number is preferred.D、100 is the default precedence.
考题
Which two statements are true regarding the system-default security policy [edit security policies default-policy]?（）(Choose two.)A、Traffic is permitted from the trust zone to the untrust zone.B、Intrazone traffic in the trust zone is permitted.C、All traffic through the device is denied.D、The policy is matched only when no other matching policies are found.
考题
Which two statements are true about terms in a routing policy?（）A、A then statement is mandatory in a termB、If a term does not contain a from statement, all routers matchC、If a term does not contain a from statement, the Junos OS will not commitD、A then statement is not mandatory in a term
考题
Which two statements are true regarding routing policy processing?（）A、The Junos OS verifies the match criteria of each policy in order and performs the associated action when a match occurs.B、Policies are evaluated from right to left as displayed in the Junos OS configuration file.C、Polices are evaluated based on the order in which they are applied to a routing protocol.D、Policy processing stops once the last statement in the policy is evaluated.
考题
多选题Which two statements are true about precedence values in policy?（） (Choose two.)A1 is the default precedence.BA lower number is preferred.CA higher number is preferred.D100 is the default precedence.
考题
多选题Which two statements are true with regard to policy ordering? （）(Choose two.)AThe last policy is the default policy, which allows all traffic.BThe order of policies is not important.CNew policies are placed at the end of the policy list.DThe insert command can be used to change the order.
考题
多选题Which two statements are true for a security policy? （）(Choose two.)AIt controls inter-zone traffic.BIt controls intra-zone traffic.CIt is named with a system-defined name.DIt controls traffic destined to the device's ingress interface.
考题
多选题Regarding an IPsec security association （SA）， which two statements are true？（）AIKE SA is bidirectional.BIPsec SA is bidirectional.CIKE SA is established during phase 2 negotiations.DIPsec SA is established during phase 2 negotiations.
考题
多选题Which two statements are true regarding IDP？（）AIDP can be used in conjunction with other JUNOS Software security features such as SCREEN options，zones， and security policy.BIDP cannot be used in conjunction with other JUNOS Software security features such as SCREEN options， zones， and security policy.CIDP inspects traffic up to the Presentation layer.DIDP inspects traffic up to the Application layer.
考题
多选题Which two statements regarding firewall user authentication client groups are true?（） (Choose two.)AA client group is a list of clients associated with a group.BA client group is a list of groups associated with a client.CClient groups are referenced in security policy in the same manner in which individual clients are referenced.DClient groups are used to simplify configuration by enabling firewall user authentication without security policy.
考题
多选题Which two statements are true about terms in a routing policy?（）AA then statement is mandatory in a termBIf a term does not contain a from statement, all routers matchCIf a term does not contain a from statement, the Junos OS will not commitDA then statement is not mandatory in a term
考题
多选题You administer a network containing SRX Series firewalls. New policy requires that you implement MAG Series devices to provide access control for end users. The policy requires that the SRX Series devices dynamically enforce security policy based on the source IP address of the user. The policy also requires that the users communicate with protected resources using encrypted traffic. Which two statements are true?（）AThe endpoints can use agentless access.BEncrypted traffic flows between the endpoint and the enforcer.CEncrypted traffic flows between the endpoint and the protected resourceDThe endpoints can use the Odyssey Access Client.
考题
多选题Which two statements describe the purpose of a security policy？（）AIt enables traffic counting and logging.BIt enforces a set of rules for transit traffic.CIt controls host inbound services on a zone.DIt controls administrator rights to access the device.
考题
多选题Which two statements regarding firewall user authentication client groups are true？（）AIndividual clients are configured under client groups in the configuration hierarchy.BClient groups are configured under individual clients in the configuration hierarchy.CClient groups are referenced in security policy in the same manner in which individual clients are referenced.DClient groups are used to simplify configuration by enabling firewall user authentication without security policy.
考题
多选题Which two statements are true regarding routing policy processing?（）AThe Junos OS verifies the match criteria of each policy in order and performs the associated action when a match occurs.BPolicies are evaluated from right to left as displayed in the Junos OS configuration file.CPolices are evaluated based on the order in which they are applied to a routing protocol.DPolicy processing stops once the last statement in the policy is evaluated.
热门标签
最新试卷