Which security or functional zone name has special significance to the Junos OS?（）A、selfB、trustC、untrustD、junos-global
Which security or functional zone name has special significance to the Junos OS?（）
- A、self
- B、trust
- C、untrust
- D、junos-global
相关考题：
In the Junos OS, which statement is true?() A. vlan.0 belongs to the untrust zone.B. You must configure Web authentication to allow inbound traffic in the untrust zone.C. The zone name untrust has no special meaning.D. The untrust zone is not configurable.
You want to create an out－of－band management zone and assign the ge－0／0／0.0 interface to that zone.From the [edit] hierarchy, which command do you use to configure this assignment?() A. set security zones management interfaces ge-0/0/0.0B. set zones functional-zone management interfaces ge-0/0/0.0C. set security zones functional-zone management interfaces ge-0/0/0.0D. set security zones functional-zone out-of-band interfaces ge-0/0/0.0
At which two levels of the Junos CLI hierarchy is the host－inbound－traffic command configured? ()(Choose two.) A. [edit security idp]B. [edit security zones security-zone trust interfaces ge-0/0/0.0]C. [edit security zones security-zone trust]D. [edit security screen]
You want to allow your device to establish OSPF adjacencies with a neighboring device connected to interface ge-0/0/3.0. Interface ge-0/0/3.0 is a member of the HR zone.Under which configuration hierarchy must you permit OSPF traffic?（）A. [edit security policies from-zone HR to-zone HR]B. [edit security zones functional-zone management protocols]C. [edit security zones protocol-zone HR host-inbound-traffic]D. [edit security zones security-zone HR host-inbound-traffic protocols]
Which security or functional zone name has special significance to the Junos OS?() A. selfB. trustC. untrustD. junos-global
Which type of zone is used by traffic transiting the device？（）A、transit zoneB、default zoneC、security zoneD、functional zone
Assume the default-policy has not been configured.Given the configuration shown in the exhibit， which two statements about traffic from host_a inthe HR zone to host_b in the trust zone are true？（） [edit security policies from-zone HR to-zone trust] user@host# show policy one { match { source-address any； destination-address any； application [ junos-http junos-ftp ]； } then { permit； } } policy two { match { source-address host_a； destination-address host_b； application [ junos-http junos-smtp ]； } then { deny； } }A、DNS traffic is denied.B、HTTP traffic is denied.C、FTP traffic is permitted.D、SMTP traffic is permitted.
Which statement is true about interface-based source NAT？（）A、PAT is a requirement.B、It requires you to configure address entries in the junos-nat zone.C、It requires you to configure address entries in the junos-global zone.D、The IP addresses being translated must be in the same subnet as the egress interface.
You want to allow your device to establish OSPF adjacencies with a neighboring device connected tointerface ge-0/0/3.0. Interface ge-0/0/3.0 is a member of the HR zone.Under which configuration hierarchy must you permit OSPF traffic？（）A、[edit security policies from-zone HR to-zone HR]B、[edit security zones functional-zone management protocols]C、[edit security zones protocol-zone HR host-inbound-traffic]D、[edit security zones security-zone HR host-inbound-traffic protocols]
Which three statements are true when working with high-availability clusters? (Choose three.)（）A、The valid cluster-id range is between 0 and 255.B、Junos OS security devices can belong to more than one cluster if cluster virtualization is enabled.C、If the cluster-id value is set to 0 on a Junos security device, the device will not participate in the cluster.D、A reboot is required if the cluster-id or node value is changed.E、Junos OS security devices can belong to one cluster only.
Which two statements are true about pool-based destination NAT？（）A、It also supports PAT.B、PAT is not supported.C、It allows the use of an address pool.D、It requires you to configure an address in the junos-global zone.
In the Junos OS, which statement is true?（）A、vlan.0 belongs to the untrust zone.B、You must configure Web authentication to allow inbound traffic in the untrust zone.C、The zone name "untrust" has no special meaning.D、The untrust zone is not configurable.
Which two steps are performed when configuring a zone？（）A、Define a default policy for the zone.B、Assign logical interfaces to the zone.C、Assign physical interfaces to the zone.D、Define the zone as a security or functional zone
What is the purpose of a zone in JUNOS Software？（）A、A zone defines a group of security devices with a common management.B、A zone defines the geographic region in which the security device is deployed.C、A zone defines a group of network segments with similar security requirements.D、A zone defines a group of network segments with similar class-of-service requirements.
At which two levels of the Junos CLI hierarchy is the host-inbound-traffic command configured? （）(Choose two.)A、[edit security idp]B、[edit security zones security-zone trust interfaces ge-0/0/0.0]C、[edit security zones security-zone trust]D、[edit security screen]
You want to create an out-of-band management zone and assign the ge-0/0/0.0 interface to that zone.From the [edit] hierarchy, which command do you use to configure this assignment?（）A、set security zones management interfaces ge-0/0/0.0B、set zones functional-zone management interfaces ge-0/0/0.0C、set security zones functional-zone management interfaces ge-0/0/0.0D、set security zones functional-zone out-of-band interfaces ge-0/0/0.0
Which statement is true about interface-based static NAT? （）A、It also supports PAT.B、It requires you to configure address entries in the junos-nat zone.C、It requires you to configure address entries in the junos-global zone.D、The IP addresses being translated must be in the same subnet as the incoming interface.
Regarding zone types， which statement is true？（）A、You cannot assign an interface to a functional zone.B、You can specifiy a functional zone in a security policy.C、Security zones must have a scheduler applied.D、You can use a security zone for traffic destined for the device itself.
多选题Which two statements are true about pool-based destination NAT？（）AIt also supports PAT.BPAT is not supported.CIt allows the use of an address pool.DIt requires you to configure an address in the junos-global zone.
单选题Which statement is true about interface-based static NAT? （）AIt also supports PAT.BIt requires you to configure address entries in the junos-nat zone.CIt requires you to configure address entries in the junos-global zone.DThe IP addresses being translated must be in the same subnet as the incoming interface.
单选题Which security or functional zone name has special significance to the Junos OS?（）AselfBtrustCuntrustDjunos-global
单选题Your task is to provision the JUNOS security platform to permit transit packets from the Private zone to theExternal zone by using an IPsec VPN and log information at the time of session close. Which configurationmeets this requirement？（）A AB BC CD D
单选题Which statement is true about interface-based source NAT？（）APAT is a requirement.BIt requires you to configure address entries in the junos-nat zone.CIt requires you to configure address entries in the junos-global zone.DThe IP addresses being translated must be in the same subnet as the egress interface.
多选题At which two levels of the Junos CLI hierarchy is the host-inbound-traffic command configured? （）(Choose two.)A[edit security idp]B[edit security zones security-zone trust interfaces ge-0/0/0.0]C[edit security zones security-zone trust]D[edit security screen]
单选题In the Junos OS, which statement is true?（）Avlan.0 belongs to the untrust zone.BYou must configure Web authentication to allow inbound traffic in the untrust zone.CThe zone name untrust has no special meaning.DThe untrust zone is not configurable.
单选题Regarding zone types， which statement is true？（）AYou cannot assign an interface to a functional zone.BYou can specifiy a functional zone in a security policy.CSecurity zones must have a scheduler applied.DYou can use a security zone for traffic destined for the device itself.
单选题What is the purpose of a zone in JUNOS Software？（）AA zone defines a group of security devices with a common management.BA zone defines the geographic region in which the security device is deployed.CA zone defines a group of network segments with similar security requirements.DA zone defines a group of network segments with similar class-of-service requirements.