题目内容

Giventheconfigurationshownintheexhibit,whichstatementistrueabouttrafficfromhost_atohost_b?()[editsecuritypoliciesfrom-zoneHRto-zonetrust]user@hostshowpolicytwo{match{source-addresssubnet_a;destination-addresshost_b;application[junos-telnetjunos-ping];}then{reject;}}policyone{match{source-addresshost_a;destination-addresssubnet_b;applicationany;}then{permit;}}host_aisinsubnet_aandhost_bisinsubnet_b.

A. DNStrafficisdenied.
B. Telnettrafficisdenied.
C. SMTPtrafficisdenied.
D. Pingtrafficispermitted

查看答案
更多问题

You have been asked to create a static route with a next hop that is not directly connected to the router. Which configuration parameter enables the static route to accomplish this scenario?()

A. resolve
B. indirect
C. next-hop
D. recursive

Which three contexts can be used as matching conditions in a source NAT configuration? ()(Choose three.)

A. routing-instance
B. zone
C. interface
D. policy
E. rule-set

WhichattributeisoptionalforIKEphase2negotiations?()

A. proxy-ID
B. phase2proposal
C. Diffie-Hellmangroupkey
D. securityprotocol(ESPorAH)

Whichcommandisneededtochangethispolicytoatunnelpolicyforapolicy-basedVPN?()[editsecuritypoliciesfrom-zonetrustto-zoneuntrust]user@hostshowpolicytunnel-traffic{match{source-addresslocal-net;destination-addressremote-net;applicationany;then{permit;}}

A. setpolicytunnel-trafficthentunnelremote-vpn
B. setpolicytunnel-trafficthenpermittunnelremote-vpn
C. setpolicytunnel-trafficthentunnelipsec-vpnremote-vpnpermit
D. setpolicytunnel-trafficthenpermittunnelipsec-vpnremote-vpn

答案查题题库