多选题At which two levels of the Junos CLI hierarchy is the host-inbound-traffic command configured? （）(Choose two.)A[edit security idp]B[edit security zones security-zone trust interfaces ge-0/0/0.0]C[edit security zones security-zone trust]D[edit security screen]
多选题
At which two levels of the Junos CLI hierarchy is the host-inbound-traffic command configured? （）(Choose two.)
A
[edit security idp]
B
[edit security zones security-zone trust interfaces ge-0/0/0.0]
C
[edit security zones security-zone trust]
D
[edit security screen]
参考解析
解析：
暂无解析
相关考题：
You want to test a configured screen value prior to deploying.Which statement will allow you to accomplish this?() A. [edit security screen] user@host# show ids-option untrust-screen { alarm-test-only; }B. [edit security screen] user@host# show ids-option untrust-screen { alarm-without-drop; }C. [edit security screen] user@host# show ids-option untrust-screen { alarm-no-drop; }D. [edit security screen] user@host# show ids-option untrust-screen { test-without-drop; }
Which two statements are true regarding the system－default security policy [edit security policies default－policy]?()(Choose two.) A. Traffic is permitted from the trust zone to the untrust zone.B. Intrazone traffic in the trust zone is permitted.C. All traffic through the device is denied.D. The policy is matched only when no other matching policies are found.
You want to create an out－of－band management zone and assign the ge－0／0／0.0 interface to that zone.From the [edit] hierarchy, which command do you use to configure this assignment?() A. set security zones management interfaces ge-0/0/0.0B. set zones functional-zone management interfaces ge-0/0/0.0C. set security zones functional-zone management interfaces ge-0/0/0.0D. set security zones functional-zone out-of-band interfaces ge-0/0/0.0
You are required to configure a SCREEN option that enables IP source route option detection.Which twoconfigurations meet this requirement?() (Choose two.) A. [edit security screen] user@host# show ids-option protectFromFlood { ip { loose-source-route-option; strict-source-route-option; } }B. [edit security screen] user@host# show ids-option protectFromFlood { ip { source-route-option; } }C. [edit security screen] user@host# show ids-option protectFromFlood { ip { record-route-option; security-option; } }D. [edit security screen] user@host# show ids-option protectFromFlood { ip { strict-source-route-option; record-route-option; } }
At which two levels of the Junos CLI hierarchy is the host－inbound－traffic command configured? ()(Choose two.) A. [edit security idp]B. [edit security zones security-zone trust interfaces ge-0/0/0.0]C. [edit security zones security-zone trust]D. [edit security screen]
Under which Junos hierarchy level are security policies configured?() A. [edit security]B. [edit protocols]C. [edit firewall]D. [edit policy-options]
You want to allow your device to establish OSPF adjacencies with a neighboring device connected to interface ge-0/0/3.0. Interface ge-0/0/3.0 is a member of the HR zone.Under which configuration hierarchy must you permit OSPF traffic?（）A. [edit security policies from-zone HR to-zone HR]B. [edit security zones functional-zone management protocols]C. [edit security zones protocol-zone HR host-inbound-traffic]D. [edit security zones security-zone HR host-inbound-traffic protocols]
Auserwantstobepermanentlyaddedtothedbagroup.Whichofthefollowingcommandsorprocessescanbeusedtoaccomplishthis() A.chgrpB.chuserC.edit/etc/userD.edit/etc/security/group
You want to test a configured screen value prior to deploying.Which statement will allow you to accomplish this?（）A、[edit security screen] user@host# show ids-option untrust-screen { alarm-test-only; }B、[edit security screen] user@host# show ids-option untrust-screen { alarm-without-drop; }C、[edit security screen] user@host# show ids-option untrust-screen { alarm-no-drop; }D、[edit security screen] user@host# show ids-option untrust-screen { test-without-drop; }
You are configuring a new BGP neighbor and want to view the configuration of interface ge-0/0/0.42. Which command do you use to achieve this result?（）A、[edit protocols bgp group external] user@router# set interfaces ge-0/0/0.42B、[edit protocols bgp group external] user@router# edit show interfaces ge-0/0/0.42C、[edit protocols bgp group external] user@router# top show interfaces ge-0/0/0.42D、[edit protocols bgp group external] user@router# show interfaces ge-0/0/0.42
You want to allow your device to establish OSPF adjacencies with a neighboring device connected tointerface ge-0/0/3.0. Interface ge-0/0/3.0 is a member of the HR zone.Under which configuration hierarchy must you permit OSPF traffic？（）A、[edit security policies from-zone HR to-zone HR]B、[edit security zones functional-zone management protocols]C、[edit security zones protocol-zone HR host-inbound-traffic]D、[edit security zones security-zone HR host-inbound-traffic protocols]
Under which configuration hierarchy is an access profile configured for firewall user authentication？（）A、[edit access]B、[edit security access]C、[edit firewall access]D、[edit firewall-authentication]
You want to allow all hosts on interface ge-0/0/0.0 to be able to ping the device’s ge-0/0/0.0 IP address.Where do you configure this functionality？（）A、[edit interfaces]B、[edit security zones]C、[edit system services]D、[edit security interfaces]
At which two levels of the Junos CLI hierarchy is the host-inbound-traffic command configured? （）(Choose two.)A、[edit security idp]B、[edit security zones security-zone trust interfaces ge-0/0/0.0]C、[edit security zones security-zone trust]D、[edit security screen]
You are configuring new BGP neighbor and want to view the configuration for the interface ge-0/0/0.42.Which command do you use to achieve this result?（）A、[edit protocols bgp group external] user@router# set interfaces ge-0/0/0.42 ?B、[edit protocols bgp group external] user@router# edit show interfaces ge-0/0/0.42C、[edit protocols bgp group external] user@router# top show interfaces ge-0/0/0.42D、[edit protocols bgp group external] user@router# show interfaces ge0/0/0.42
Which two statements are true regarding IDP？（）A、IDP can be used in conjunction with other JUNOS Software security features such as SCREEN options，zones， and security policy.B、IDP cannot be used in conjunction with other JUNOS Software security features such as SCREEN options， zones， and security policy.C、IDP inspects traffic up to the Presentation layer.D、IDP inspects traffic up to the Application layer.
You are required to configure a SCREEN option that enables IP source route option detection.Which twoconfigurations meet this requirement?（） (Choose two.)A、[edit security screen] user@host# show ids-option protectFromFlood { ip { loose-source-route-option; strict-source-route-option; } }B、[edit security screen] user@host# show ids-option protectFromFlood { ip { source-route-option; } }C、[edit security screen] user@host# show ids-option protectFromFlood { ip { record-route-option; security-option; } }D、[edit security screen] user@host# show ids-option protectFromFlood { ip { strict-source-route-option; record-route-option; } }
You want to create an out-of-band management zone and assign the ge-0/0/0.0 interface to that zone.From the [edit] hierarchy, which command do you use to configure this assignment?（）A、set security zones management interfaces ge-0/0/0.0B、set zones functional-zone management interfaces ge-0/0/0.0C、set security zones functional-zone management interfaces ge-0/0/0.0D、set security zones functional-zone out-of-band interfaces ge-0/0/0.0
Which two statements are true regarding the system-default security policy [edit security policies default-policy]?（）(Choose two.)A、Traffic is permitted from the trust zone to the untrust zone.B、Intrazone traffic in the trust zone is permitted.C、All traffic through the device is denied.D、The policy is matched only when no other matching policies are found.
Under which Junos hierarchy level are security policies configured?（）A、[edit security]B、[edit protocols]C、[edit firewall]D、[edit policy-options]
单选题Under which Junos hierarchy level are security policies configured?（）A[edit security]B[edit protocols]C[edit firewall]D[edit policy-options]
多选题Which two statements are true regarding IDP？（）AIDP can be used in conjunction with other JUNOS Software security features such as SCREEN options，zones， and security policy.BIDP cannot be used in conjunction with other JUNOS Software security features such as SCREEN options， zones， and security policy.CIDP inspects traffic up to the Presentation layer.DIDP inspects traffic up to the Application layer.
单选题You want to create an out-of-band management zone and assign the ge-0/0/0.0 interface to that zone.From the [edit] hierarchy, which command do you use to configure this assignment?（）Aset security zones management interfaces ge-0/0/0.0Bset zones functional-zone management interfaces ge-0/0/0.0Cset security zones functional-zone management interfaces ge-0/0/0.0Dset security zones functional-zone out-of-band interfaces ge-0/0/0.0
多选题At which two levels of the Junos CLI hierarchy is the host-inbound-traffic command configured? （）(Choose two.)A[edit security idp]B[edit security zones security-zone trust interfaces ge-0/0/0.0]C[edit security zones security-zone trust]D[edit security screen]
多选题You are required to configure a SCREEN option that enables IP source route option detection.Which twoconfigurations meet this requirement?（） (Choose two.)A[edit security screen] user@host# show ids-option protectFromFlood { ip { loose-source-route-option; strict-source-route-option; } }B[edit security screen] user@host# show ids-option protectFromFlood { ip { source-route-option; } }C[edit security screen] user@host# show ids-option protectFromFlood { ip { record-route-option; security-option; } }D[edit security screen] user@host# show ids-option protectFromFlood { ip { strict-source-route-option; record-route-option; } }
单选题Under which configuration hierarchy is an access profile configured for firewall user authentication？（）A[edit access]B[edit security access]C[edit firewall access]D[edit firewall-authentication]
单选题You want to allow all hosts on interface ge-0/0/0.0 to be able to ping the device’s ge-0/0/0.0 IP address.Where do you configure this functionality？（）A[edit interfaces]B[edit security zones]C[edit system services]D[edit security interfaces]
多选题Which two statements are true regarding the system-default security policy [edit security policies default-policy]?（）(Choose two.)ATraffic is permitted from the trust zone to the untrust zone.BIntrazone traffic in the trust zone is permitted.CAll traffic through the device is denied.DThe policy is matched only when no other matching policies are found.