The same Web site is visited for the second time using a branch SRX Series Services Gateway configured with SurfControl integrated Web filtering.Which statement is true?（）A、The SRX device sends the URL to the SurfControl server in the cloud and the SurfControl server provides the SRX.B、The SRX device sends the URL to the SurfControl server in the cloud and the SurfControl server asks the SRX device previously visited.C、The SRX device looks at its local cache to find the category of the URL.D、The SRX device does not perform any Web filtering operation as the Web site has already been visited.
The same Web site is visited for the second time using a branch SRX Series Services Gateway configured with SurfControl integrated Web filtering.Which statement is true?（）
- A、The SRX device sends the URL to the SurfControl server in the cloud and the SurfControl server provides the SRX.
- B、The SRX device sends the URL to the SurfControl server in the cloud and the SurfControl server asks the SRX device previously visited.
- C、The SRX device looks at its local cache to find the category of the URL.
- D、The SRX device does not perform any Web filtering operation as the Web site has already been visited.
相关考题：
Click the Exhibit button.What are two valid reasons for the output shown in the exhibit?() (Choose two.) A. The local Web-filtering daemon is not enabled or is not running.B. The integrated Web-filtering policy server is not reachable.C. No DNS is configured on the SRX Series device.D. No security policy is configured to use Web filtering.
Antispam can be leveraged with which two features on a branch SRX Series device to provide maximum protection from malicious e－mail content? ()(Choose two.) A. integrated Web filteringB. full AVC. IPSD. local Web filtering
Which two statements are true about the Websense redirect Web filter solution? ()(Choose two.) A. The Websense redirect Web filter solution does not require a license on the SRX device.B. The Websense server provides the SRX device with a category for the URL and the SRX device then matches the category decides to permit or deny the URL.C. The Websense server provides the SRX device with a decision as to whether the SRX device permits or denies the URL.D. When the Websense server does not know the category of the URL, it sends a request back to the SRX device SurfControl server in the cloud.
The Junos OS blocks an HTTP request due to its inclusion on the url－blacklist.Which form of Web filtering on the branch SRX device is fully executed within the device itself?() A. redirect Web filteringB. integrated Web filteringC. blacklist Web filteringD. local Web filtering
A user wants to establish an FTP session to a server behind an SRX device but must authenticate to a Web page on the SRX device for additional authentication.Which type of user authentication is configured?（）A. pass-throughB. WebAuthC. WebAuth with Web redirectD. pass-through with Web redirect
Which three are necessary for antispam to function properly on a branch SRX Series device? ()(Choose three.) A. an antispam licenseB. DNS servers configured on the SRX Series deviceC. SMTP services on SRXD. a UTM profile with an antispam configuration in the appropriate security policyE. antivirus (full or express)
You are validating the configuration of your SRX Series device and see the output shown below.What does this indicate?() A.The SRX Series device has been configured correctly, the Junos Pulse Access Control Service is reachable on the network, and the SRX Series device is waiting to receive the initial connection from the Junos Pulse Access Control Service.B.The SRX Series device has confirmed that the Junos Pulse Access Control Service is configured and is reachable on the network, the SRX Series device is waiting to receive the connection from the Junos Pulse Access Control Service, and all that remains to be accomplished is to configure the SRX Series device.C.The SRX Series device is configured correctly and connected to the Junos Pulse Access Control Service. All that remains to be done to complete the configuration is to configure the SRX Series device on the Junos Pulse Access Control Service.D.Both the Junos Pulse Access Control Service and the SRX Series device are configured correctly and communicating with each other.
What is the proper sequence of evaluation for the SurfControl integrated Web filter solution?() A. whitelists, blacklists, SurfControl categoriesB. blacklists, whitelists, SurfControl categoriesC. SurfControl categories, whitelists, blacklistsD. SurfControl categories, blacklists, whitelists
Which Web－filtering technology can be used at the same time as integrated Web filtering on a single branch SRX Series device?() A. Websense redirect Web filteringB. local Web filtering (blacklist or whitelist)C. firewall user authenticationD. ICAP
A user wants to establish an HTTP session to a server behind an SRX device but is being pointed to Web page on the SRX device for additional authentication.Which type of user authentication is configured?（）A. pass-through with Web redirectB. WebAuth with HTTP redirectC. WebAuthD. pass-through
Which Web-filtering technology can be used at the same time as integrated Web filtering on a single branch SRX Series device?（）A、Websense redirect Web filteringB、local Web filtering (blacklist or whitelist)C、firewall user authenticationD、ICAP
A user wants to establish an HTTP session to a server behind an SRX device but is being pointed to Web page on the SRX device for additional authentication.Which type of user authentication is configured?（）A、pass-through with Web redirectB、WebAuth with HTTP redirectC、WebAuthD、pass-through
You are installing a MAG Series device for access control using an SRX Series device as the firewall enforcer. The MAG Series device resides in the same security zone as users. However, the users reside in different subnets and use the SRX Series device as an IP gateway.Which statement is true?（）A、You must configure a security policy on the SRX Series device to allow traffic to flow from the user devices to the MAG Series device.B、No security policy is necessary on the SRX Series device to allow traffic to flow from the user devices to the MAG Series device.C、You must configure host-inbound traffic on the SRX Series device to allow SSL traffic between the MAG Series device and the user devices.D、You must configure host-inbound traffic on the SRX Series device to allow EAP traffic between the MAG Series device and the user devices.
What is the proper sequence of evaluation for the SurfControl integrated Web filter solution?（）A、whitelists, blacklists, SurfControl categoriesB、blacklists, whitelists, SurfControl categoriesC、SurfControl categories, whitelists, blacklistsD、SurfControl categories, blacklists, whitelists
A user wants to establish an FTP session to a server behind an SRX device but must authenticate to a Web page on the SRX device for additional authentication.Which type of user authentication is configured?（）A、pass-throughB、WebAuthC、WebAuth with Web redirectD、pass-through with Web redirect
Which three are necessary for antispam to function properly on a branch SRX Series device? （）(Choose three.)A、an antispam licenseB、DNS servers configured on the SRX Series deviceC、SMTP services on SRXD、a UTM profile with an antispam configuration in the appropriate security policyE、antivirus (full or express)
Antispam can be leveraged with which two features on a branch SRX Series device to provide maximum protection from malicious e-mail content? （）(Choose two.)A、integrated Web filteringB、full AVC、IPSD、local Web filtering
The Junos OS blocks an HTTP request due to its inclusion on the url-blacklist.Which form of Web filtering on the branch SRX device is fully executed within the device itself?（）A、redirect Web filteringB、integrated Web filteringC、blacklist Web filteringD、local Web filtering
Which three situations will trigger an e-mail to be flagged as spam if a branch SRX Series device has been properly configured with antispam inspection enabled for the appropriate security policy? （）(Choose three.)A、The server sending the e-mail to the SRX Series device is a known open SMTP relay.B、The server sending the e-mail to the SRX Series device is running unknown SMTP server software.C、The server sending the e-mail to the SRX Series device is on an IP address range that is known to be dynamically assigned.D、The e-mail that the server is sending to the SRX Series device has a virus in its attachment.E、The server sending the e-mail to the SRX Series device is a known spammer IP address.
You are performing the initial setup of a new MAG Series device and have installed a valid CA- signed certificate on the MAG Series device. Connectivity to an existing SRX Series firewall enforcer cannot be obtained.What are two explanations for this behavior?（）A、The MAG Series device has multiple ports associated with the certificate.B、The MAG Series device's serial number needs to be configured on the SRX Series device.C、The SRX Series device must have a certificate signed by the same authority as the MAG Series device.D、The MAG Series device and SRX Series device are not synchronized to an NTP server.
Which statement is true about SurfControl integrated Web filter solution?（）A、The SurfControl server in the cloud provides the SRX device with the category of the URL as well as the reputation of the URL.B、The SurfControl server in the cloud provides the SRX device with only the category of the URL.C、The SurfControl server in the cloud provides the SRX device with only the reputation of the URL.D、The SurfControl server in the cloud provides the SRX device with a decision to permit or deny the URL.
多选题Which three are necessary for antispam to function properly on a branch SRX Series device? （）(Choose three.)Aan antispam licenseBDNS servers configured on the SRX Series deviceCSMTP services on SRXDa UTM profile with an antispam configuration in the appropriate security policyEantivirus (full or express)
多选题Antispam can be leveraged with which two features on a branch SRX Series device to provide maximum protection from malicious e-mail content? （）(Choose two.)Aintegrated Web filteringBfull AVCIPSDlocal Web filtering
单选题The Junos OS blocks an HTTP request due to its inclusion on the url-blacklist.Which form of Web filtering on the branch SRX device is fully executed within the device itself?（）Aredirect Web filteringBintegrated Web filteringCblacklist Web filteringDlocal Web filtering
多选题You are performing the initial setup of a new MAG Series device and have installed a valid CA- signed certificate on the MAG Series device. Connectivity to an existing SRX Series firewall enforcer cannot be obtained.What are two explanations for this behavior?（）AThe MAG Series device has multiple ports associated with the certificate.BThe MAG Series device's serial number needs to be configured on the SRX Series device.CThe SRX Series device must have a certificate signed by the same authority as the MAG Series device.DThe MAG Series device and SRX Series device are not synchronized to an NTP server.
单选题Which statement is true about SurfControl integrated Web filter solution?（）AThe SurfControl server in the cloud provides the SRX device with the category of the URL as well as the reputation of the URL.BThe SurfControl server in the cloud provides the SRX device with only the category of the URL.CThe SurfControl server in the cloud provides the SRX device with only the reputation of the URL.DThe SurfControl server in the cloud provides the SRX device with a decision to permit or deny the URL.
单选题The same Web site is visited for the second time using a branch SRX Series Services Gateway configured with SurfControl integrated Web filtering.Which statement is true?（）AThe SRX device sends the URL to the SurfControl server in the cloud and the SurfControl server provides the SRX.BThe SRX device sends the URL to the SurfControl server in the cloud and the SurfControl server asks the SRX device previously visited.CThe SRX device looks at its local cache to find the category of the URL.DThe SRX device does not perform any Web filtering operation as the Web site has already been visited.