Giventheconfigurationshownintheexhibit,whichstatementistrueabouttrafficfromhost_atohost_b?()[editsecuritypoliciesfrom-zoneHRto-zonetrust]user@hostshowpolicytwo{match{source-addresssubnet_a;destination-addresshost_b;application[junos-telnetjunos-ping];}then{reject;}}policyone{match{source-addresshost_a;destination-addresssubnet_b;applicationany;}then{permit;}}host_aisinsubnet_aandhost_bisinsubnet_b.
A. DNStrafficisdenied.
B. Telnettrafficisdenied.
C. SMTPtrafficisdenied.
D. Pingtrafficispermitted
查看答案
You have been asked to create a static route with a next hop that is not directly connected to the router. Which configuration parameter enables the static route to accomplish this scenario?()
A. resolve
B. indirect
C. next-hop
D. recursive
Which three contexts can be used as matching conditions in a source NAT configuration? ()(Choose three.)
A. routing-instance
B. zone
C. interface
D. policy
E. rule-set
WhichattributeisoptionalforIKEphase2negotiations?()
A. proxy-ID
B. phase2proposal
C. Diffie-Hellmangroupkey
D. securityprotocol(ESPorAH)
Whichcommandisneededtochangethispolicytoatunnelpolicyforapolicy-basedVPN?()[editsecuritypoliciesfrom-zonetrustto-zoneuntrust]user@hostshowpolicytunnel-traffic{match{source-addresslocal-net;destination-addressremote-net;applicationany;then{permit;}}
A. setpolicytunnel-trafficthentunnelremote-vpn
B. setpolicytunnel-trafficthenpermittunnelremote-vpn
C. setpolicytunnel-trafficthentunnelipsec-vpnremote-vpnpermit
D. setpolicytunnel-trafficthenpermittunnelipsec-vpnremote-vpn