单选题When using RADIUS as an external authentication method for 802.1X authentication for the Junos Pulse Access Control Service, what must you do to ensure that the RADIUS authentication works properly?()AConfigure IP helper to forward the authentication requests from the clients to the external RADIUS serverBConfigure the supplicant as anexternal authentication serverCConfigure RADIUS proxy on the realmDSpecify the correct RADIUS port 389 on the Junos Pulse Access Control Service
单选题
When using RADIUS as an external authentication method for 802.1X authentication for the Junos Pulse Access Control Service, what must you do to ensure that the RADIUS authentication works properly?()
A
Configure IP helper to forward the authentication requests from the clients to the external RADIUS server
B
Configure the supplicant as anexternal authentication server
C
Configure RADIUS proxy on the realm
D
Specify the correct RADIUS port 389 on the Junos Pulse Access Control Service
参考解析
解析:
暂无解析
相关考题:
Consider the Mysql Enterprise Audit plugin. Which statement is true when you identify a connection event that has used external authentication?() A.The attribute STATUS is set to the string EXTERNAL_AUTHB.The attribute PRIV_USER contains the usernameC.The event type that is given in the attribute NAME is EXTERNAL_AUTHD.There is no differentiation between native and external authentication eventsE.External authentication is managed through external auditing logsF.The PROXY_PRIV user shows a username if external authentication is used
When using RADIUS as an external authentication method for 802.1X authentication for the Junos Pulse Access Control Service, what must you do to ensure that the RADIUS authentication works properly?() A. Configure IP helper to forward the authentication requests from the clients to the external RADIUS serverB. Configure the supplicant as anexternal authentication serverC. Configure RADIUS proxy on the realmD. Specify the correct RADIUS port 389 on the Junos Pulse Access Control Service
You are installing a new deployment of the Junos Pulse Access Control Service. You have an existing RADIUS server that has a populated user file. You are considering using the RADIUS proxy feature.Which consideration must you take into account?()A. Your RADIUS server database must be replicated onto another device for redundancy.B. Inner proxy creates a tunnel between the supplicant and the external server.C. RADIUS proxy causes the role assignment process to be skipped.D. Outer proxy configuration passes authentication data to the external RADIUS server in clear text.
How can you control which local IP address the ERX uses when communicating with a RADIUS server?() A. radius update-source-addressB. radius calling-station-formatC. radius accounting server 10.13.7.55D. radius authentication server 10.13.7.55
A company is using RADIUS to authenticate login requests to its Juniper Networks routers. Usersshould still be able to authenticate using the local password database but only if the RADIUS server is unreachable. Which JUNOS software configuration accomplishes this goal?()A. authentication-order radius;B. authentication-order password;C. authentication-order [radius password];D. authentication-order [password radius];
Which information is contained in a AAA authentication method list?()A、A pointer to the address where a RADIUS server can be locatedB、A sequential list of user authentication methodsC、A description of what a user can execute on a routerD、The setup for the authentication phase on a router
Which of the following statements about authentication responses and conditions is true? ()(Choosetwo.)A、When a router receives a failure response, it stops querying authentication methods.B、When a router receives an error response, it stops querying authentication methods.C、If the router receives a failure response from an authentication method, it queries the next method.D、The router does not differentiate between failure and error responses; the authentication process is always interrupted.E、If it receives no response from the authentication method, a router will determine the error condition On its own; the router also has the option to proceed to the next method in a list if configured accordingly.
Which two statements about the open and shared key wireless-authentication methods are true? ()A、 Shared key authentication is considered more secure than open authentication.B、 Shared key authentication is considered less secure than open authentication.C、 If the WEP keys do not match using the open authentication method, the client will not authenticate, associate, and transfer data.D、 If the WEP keys do not match using the open authentication method, the client will still be able to authenticate and associate, but will not transfer data.E、 If the WEP keys do not match using the open authentication method, the client will still be able to authenticate, associate, and transfer data.
The authentication order configuration on your M120 includes the settings tacplus and radius (in that order), but does not include the password parameter. You attempt to log in to the device, but the network containing the authentication servers is currently down. Which statement is true about your login attempt?()A、The login attempt is rejected.B、The login attempt is automatically accepted after the authentication servers’ timeout value is reached, since there are no other authentication methods available.C、The M120 automatically tries authenticating locally on the device after the authentication servers’ timeout value is reached.D、The M120 automatically tries authenticating locally on the device before using external authentication.
How can you control which local IP address the ERX uses when communicating with a RADIUS server?()A、radius update-source-addressB、radius calling-station-formatC、radius accounting server 10.13.7.55D、radius authentication server 10.13.7.55
What is the objective of the aaa authentication login console-in local command?()A、It specifies the login authentication method list named console-in using the local user database on the routerB、It specifies the login authorization method list named console-in using the local RADIUS username-password data baseC、It specifies the login authentication list named console-in using the local username- password data base on the routerD、It specifies the login authorization method list named console-in using the local username- password data base on the router
A company is using RADIUS to authenticate login requests to its Juniper Networks routers. Usersshould still be able to authenticate using the local password database but only if the RADIUS server is unreachable. Which JUNOS software configuration accomplishes this goal?()A、authentication-order radius;B、authentication-order password;C、authentication-order [radius password];D、authentication-order [password radius];
Which of the following statements about authentication responses and conditions is true?()(Choose two.)A、When a router receives a failure response, it stops querying authentication methods.B、When a router receives an error response, it stops querying authentication methods.C、If the router receives a failure response from an authentication method, it queries the next method.D、The router does not differentiate between failure and error responses; the authentication process is always interrupted.E、If it receives no response from the authentication method, a router will determine the error condition on its own; the router also has the option to proceed to the next method in a list if configured accordingly.
Which two statements about the open and shared key wireless-authentication methods are true?()A、shared key authentication is considered more secure than open authenticationB、shared key authentication is considered less secure than open authenticationC、if the WEP keys do not match using the open authentication method, the client will not authenticate, associate, and transfer dataD、if the WEP keys do not match using the open authentication method, the client will still be able to authenticate and associate, but will not transfer dataE、if the WEP keys do not match using the open authentication method, the client will still be able to authenticate, associate, and transfer data
Which two statements are true about using the isUserInRole method to implement security in a Java EEapplication?()A、It can be invoked only from the doGet or doPost methods.B、It can be used independently of the getRemoteUser method.C、Can return "true" even when its argument is NOT defined as a valid role name in the deployment descriptor.D、Using the isUserInRole method overrides any declarative authentication related to the method in which it is invoked.
Which routers must be configured with the same authentication string when configuring OSPF authentication?()A、all routers on a linkB、all routers in an areaC、all external OSPF peersD、all routers in an OSPF domain
Consider the Mysql Enterprise Audit plugin. Which statement is true when you identify a connection event that has used external authentication?()A、The attribute "STATUS" is set to the string EXTERNAL_AUTHB、The attribute "PRIV_USER" contains the usernameC、The event type that is given in the attribute "NAME" is EXTERNAL_AUTHD、There is no differentiation between native and external authentication eventsE、External authentication is managed through external auditing logsF、The "PROXY_PRIV" user shows a username if external authentication is used
Click the Exhibit button and examine the diagram. You are running a database that takes advantage of features provided by Connection Manager, heterogeneous services, and external procedures. The diagram depicts the components used for the naming method you just configured. Which naming method are you using?()A、Host naming method.B、Local naming method.C、Directory naming method.D、External naming method.
Your company has deployed Network Access Protection (NAP).You configure secure wireless access to the network by using 802.1X authentication from any access point. You need to ensure that all client computers that access the network are evaluated by NAP. What should you do?()A、Configure all access points as RADIUS clients to the Remediation Servers.B、Configure all access points as RADIUS clients to the Network Policy Server (NPS).C、Create a Network Policy that defines Remote Access Server as a network connection method.D、Create a Network Policy that specifies EAP-TLS as the only available authentication method.
单选题Consider the Mysql Enterprise Audit plugin. Which statement is true when you identify a connection event that has used external authentication?()AThe attribute STATUS is set to the string EXTERNAL_AUTHBThe attribute PRIV_USER contains the usernameCThe event type that is given in the attribute NAME is EXTERNAL_AUTHDThere is no differentiation between native and external authentication eventsEExternal authentication is managed through external auditing logsFThe PROXY_PRIV user shows a username if external authentication is used
单选题You are installing a new deployment of the Junos Pulse Access Control Service. You have an existing RADIUS server that has a populated user file. You are considering using the RADIUS proxy feature.Which consideration must you take into account?()AYour RADIUS server database must be replicated onto another device for redundancy.BInner proxy creates a tunnel between the supplicant and the external server.CRADIUS proxy causes the role assignment process to be skipped.DOuter proxy configuration passes authentication data to the external RADIUS server in clear text.
单选题What is the objective of the aaa authentication login console-in local command?()AIt specifies the login authentication method list named console-in using the local user database on the routerBIt specifies the login authorization method list named console-in using the local RADIUS username-password data baseCIt specifies the login authentication list named console-in using the local username- password data base on the routerDIt specifies the login authorization method list named console-in using the local username- password data base on the router
单选题Your company has deployed network access protection (NAP). You configure secure wireless access to the network by using 802.1x authentication from any access point. You need to ensure that all client computers that access the network are evaluated by NAP what should you do?()AConfigure all access points as RADIUS clients to the remediation servers.BConfigure all access points as RADIUS clients to the network Policy Server (NPS).CCreate a network policy that defines remote access server as a network connection method.DCreate a network policy that specifies EAP-TLS as the only available authentication method.
多选题You need to design an access control strategy for the external and intranet Web sites. Which two actions should you perform?()AEnable SSL on the external Web site by using a Microsoft cryptographic service provider (CSP)BEnable Microsoft .NET Passport authentication on the external Web site. Use Passport Level 0 with SSL on the external Web siteCEnable SSL on the external Web site by using a commercial digital certificateDEnable SSL on the intranet Web site by using an internal server certificateEEnable SSL on the external Web site by using an internal server certificate
多选题Which two statements about the open and shared key wireless-authentication methods are true? ()AShared key authentication is considered more secure than open authentication.BShared key authentication is considered less secure than open authentication.CIf the WEP keys do not match using the open authentication method, the client will not authenticate, associate, and transfer data.DIf the WEP keys do not match using the open authentication method, the client will still be able to authenticate and associate, but will not transfer data.EIf the WEP keys do not match using the open authentication method, the client will still be able to authenticate, associate, and transfer data.
单选题Which information is contained in a AAA authentication method list?()AA pointer to the address where a RADIUS server can be locatedBA sequential list of user authentication methodsCA description of what a user can execute on a routerDThe setup for the authentication phase on a router
多选题Which two statements are true about using the isUserInRole method to implement security in a Java EEapplication?()AIt can be invoked only from the doGet or doPost methods.BIt can be used independently of the getRemoteUser method.CCan return true even when its argument is NOT defined as a valid role name in the deployment descriptor.DUsing the isUserInRole method overrides any declarative authentication related to the method in which it is invoked.