多选题Which two statements are true for a security policy? ()(Choose two.)AIt controls inter-zone traffic.BIt controls intra-zone traffic.CIt is named with a system-defined name.DIt controls traffic destined to the device's ingress interface.

多选题
Which two statements are true for a security policy? ()(Choose two.)
A

It controls inter-zone traffic.

B

It controls intra-zone traffic.

C

It is named with a system-defined name.

D

It controls traffic destined to the device's ingress interface.


参考解析

解析: 暂无解析

相关考题:

Click the Exhibit button.Assume the default-policy has not been configured.Given the configuration shown in the exhibit, which two statements about traffic from host_a in the HR zone to host_b in the trust zone are true? ()(Choose two.)A. DNS traffic is denied.B. HTTP traffic is denied.C. FTP traffic is permitted.D. SMTP traffic is permitted.

Which two statements are true regarding the system-default security policy [edit security policies default-policy]?()(Choose two.) A. Traffic is permitted from the trust zone to the untrust zone.B. Intrazone traffic in the trust zone is permitted.C. All traffic through the device is denied.D. The policy is matched only when no other matching policies are found.

Which two statements regarding firewall user authentication client groups are true?() (Choose two.) A. A client group is a list of clients associated with a group.B. A client group is a list of groups associated with a client.C. Client groups are referenced in security policy in the same manner in which individual clients are referenced.D. Client groups are used to simplify configuration by enabling firewall user authentication without security policy.

Which two statements are true about the relationship between static NAT and proxy ARP? ()(Choose two.) A. It is necessary to forward ARP requests to remote hosts.B. It is necessary when translated traffic belongs to the same subnet as the ingress interface.C. It is not automatic and you must configure it.D. It is enabled by default and you do not need to configure it.

Which two statements are true about precedence values in policy?() (Choose two.) A. 1 is the default precedence.B. A lower number is preferred.C. A higher number is preferred.D. 100 is the default precedence.

Which two statements regarding JUNOS architecture are correct?() A.The Routing Engine handles all exception traffic.B.The Routing Engine synchronizes the route table with the PFEC.The Routing Engine is hot-pluggable.D.The Routing Engine controls the PFE

Which two statements regarding firewall user authentication client groups are true?() (Choose two.)A、A client group is a list of clients associated with a group.B、A client group is a list of groups associated with a client.C、Client groups are referenced in security policy in the same manner in which individual clients are referenced.D、Client groups are used to simplify configuration by enabling firewall user authentication without security policy.

Which two statements are true about L2TP tunnels?() (Choose two.)A、Traffic is clear textB、Traffic is encryptedC、They are initiated by the LNSD、They are initiated by the LAC

Which statement describes the behavior of a security policy?()A、The implicit default security policy permits all traffic.B、Traffic destined to the device itself always requires a security policy.C、Traffic destined to the device’s incoming interface does not require a security policy.D、The factory-default configuration permits all traffic from all interfaces.

Which two statements regarding JUNOS architecture are correct?()A、The Routing Engine handles all exception traffic.B、The Routing Engine synchronizes the route table with the PFEC、The Routing Engine is hot-pluggable.D、The Routing Engine controls the PFE

Which two statements describe the purpose of a security policy?()A、It enables traffic counting and logging.B、It enforces a set of rules for transit traffic.C、It controls host inbound services on a zone.D、It controls administrator rights to access the device.

Which two statements are true for a security policy? ()(Choose two.)A、It controls inter-zone traffic.B、It controls intra-zone traffic.C、It is named with a system-defined name.D、It controls traffic destined to the device's ingress interface.

Which two parameters are configured in IPsec policy? ()(Choose two.)A、modeB、IKE gatewayC、security proposalD、Perfect Forward Secrecy

Which two statements are true with regard to policy ordering? ()(Choose two.)A、The last policy is the default policy, which allows all traffic.B、The order of policies is not important.C、New policies are placed at the end of the policy list.D、The insert command can be used to change the order.

Which two statements are true about precedence values in policy?() (Choose two.)A、1 is the default precedence.B、A lower number is preferred.C、A higher number is preferred.D、100 is the default precedence.

Which two statements are true regarding the system-default security policy [edit security policies default-policy]?()(Choose two.)A、Traffic is permitted from the trust zone to the untrust zone.B、Intrazone traffic in the trust zone is permitted.C、All traffic through the device is denied.D、The policy is matched only when no other matching policies are found.

Regarding zone types, which statement is true?()A、You cannot assign an interface to a functional zone.B、You can specifiy a functional zone in a security policy.C、Security zones must have a scheduler applied.D、You can use a security zone for traffic destined for the device itself.

多选题Which two statements are true with regard to policy ordering? ()(Choose two.)AThe last policy is the default policy, which allows all traffic.BThe order of policies is not important.CNew policies are placed at the end of the policy list.DThe insert command can be used to change the order.

多选题You create a Web Form. You need to add controls that use adaptive rendering to display content. The type of content rendered must depend on the device that is requesting the page. What are two possible ways to achieve this goal? ()AAdd custom controls that emit XHTML to the Web Form.BAdd custom controls that emit WML to the Web Form.CAdd mobile controls to the Web Form.DAdd Web server controls to the Web Form.

单选题Which statement describes the behavior of a security policy?()AThe implicit default security policy permits all traffic.BTraffic destined to the device itself always requires a security policy.CTraffic destined to the device’s incoming interface does not require a security policy.DThe factory-default configuration permits all traffic from all interfaces.

多选题Which two statements regarding firewall user authentication client groups are true?() (Choose two.)AA client group is a list of clients associated with a group.BA client group is a list of groups associated with a client.CClient groups are referenced in security policy in the same manner in which individual clients are referenced.DClient groups are used to simplify configuration by enabling firewall user authentication without security policy.

多选题Which two statements are true about the relationship between static NAT and proxy ARP? ()(Choose two.)AIt is necessary to forward ARP requests to remote hosts.BIt is necessary when translated traffic belongs to the same subnet as the ingress interface.CIt is not automatic and you must configure it.DIt is enabled by default and you do not need to configure it.

多选题Which two statements describe the purpose of a security policy?()AIt enables traffic counting and logging.BIt enforces a set of rules for transit traffic.CIt controls host inbound services on a zone.DIt controls administrator rights to access the device.

多选题Which two statements regarding JUNOS architecture are correct?()AThe Routing Engine handles all exception traffic.BThe Routing Engine synchronizes the route table with the PFECThe Routing Engine is hot-pluggable.DThe Routing Engine controls the PFE

多选题Which two statements are true about precedence values in policy?() (Choose two.)A1 is the default precedence.BA lower number is preferred.CA higher number is preferred.D100 is the default precedence.

多选题Which two statements are true about the duplexing of the backups taken by RMAN? ()(Choose two.)AIt's only supported for the backups performed on the tapeBIt is not supported for backup operations that produce image copiesCDuplex backups need a parallelism for the device to be equal to number of copiesDDuplex backups can be performed to either disk or tape, but cannot be performed on tape and disk simultaneously

多选题Which two statements are true regarding the system-default security policy [edit security policies default-policy]?()(Choose two.)ATraffic is permitted from the trust zone to the untrust zone.BIntrazone traffic in the trust zone is permitted.CAll traffic through the device is denied.DThe policy is matched only when no other matching policies are found.