1077 お客様のコメント
質問 1：
An attacker sends a low rate of TCP SYN segments to hosts, hoping that at least one port replies. Which type of an attack does this scenario describe?
A. port scanning
B. IP address sweep
C. SYN flood
D. DoS
正解：A
質問 2：
Which statement describes the behavior of a security policy?
A. Traffic destined to the device's incoming interface does not require a security policy.
B. The implicit default security policy permits all traffic.
C. Traffic destined to the device itself always requires a security policy.
D. The factory-default configuration permits all traffic from all interfaces.
正解：A
質問 3：
Which two configuration elements are required for a policy-based VPN? (Choose two.)
A. IKE gateway
B. security policy referencing the IPsec VPN tunnel
C. security policy to permit the IKE traffic
D. secure tunnel interface
正解：A,B
質問 4：
What are two uses of NAT? (Choose two.)
A. allowing networks with overlapping private address space to communicate
B. preventing unauthorized connections from outside the network
C. allowing stateful packet inspection
D. conserving public IP addresses
正解：A,D
質問 5：
Which two statements describe the purpose of a security policy? (Choose two.)
A. It controls host inbound services on a zone.
B. It controls administrator rights to access the device.
C. It enforces a set of rules for transit traffic.
D. It enables traffic counting and logging.
正解：C,D
質問 6：
Click the Exhibit button.
profile ftp-users {
client nancy {
firewall-user {
password "$9$lJ8vLNdVYZUHKMi.PfzFcyrvX7"; ## SECRET-DATA
}}
client walter {
firewall-user {
password "$9$a1UqfTQnApB36pBREKv4aJUk.5QF"; ## SECRET-DATA
}}
session-options {
client-group ftp-group;
}}
firewall-authentication {
pass-through {
default-profile ftp-users;
ftp {
banner {
login "JUNOS Rocks!";
}}}}
Given the configuration shown in the exhibit, which configuration object would be used to
associate both Nancy and Walter with firewall user authentication within a security policy?
A. ftp-users
B. ftp-group
C. nancy and walter
D. firewall-user
正解：B
An attacker sends a low rate of TCP SYN segments to hosts, hoping that at least one port replies. Which type of an attack does this scenario describe?
A. port scanning
B. IP address sweep
C. SYN flood
D. DoS
正解：A
質問 2：
Which statement describes the behavior of a security policy?
A. Traffic destined to the device's incoming interface does not require a security policy.
B. The implicit default security policy permits all traffic.
C. Traffic destined to the device itself always requires a security policy.
D. The factory-default configuration permits all traffic from all interfaces.
正解：A
質問 3：
Which two configuration elements are required for a policy-based VPN? (Choose two.)
A. IKE gateway
B. security policy referencing the IPsec VPN tunnel
C. security policy to permit the IKE traffic
D. secure tunnel interface
正解：A,B
質問 4：
What are two uses of NAT? (Choose two.)
A. allowing networks with overlapping private address space to communicate
B. preventing unauthorized connections from outside the network
C. allowing stateful packet inspection
D. conserving public IP addresses
正解：A,D
質問 5：
Which two statements describe the purpose of a security policy? (Choose two.)
A. It controls host inbound services on a zone.
B. It controls administrator rights to access the device.
C. It enforces a set of rules for transit traffic.
D. It enables traffic counting and logging.
正解：C,D
質問 6：
Click the Exhibit button.
profile ftp-users {
client nancy {
firewall-user {
password "$9$lJ8vLNdVYZUHKMi.PfzFcyrvX7"; ## SECRET-DATA
}}
client walter {
firewall-user {
password "$9$a1UqfTQnApB36pBREKv4aJUk.5QF"; ## SECRET-DATA
}}
session-options {
client-group ftp-group;
}}
firewall-authentication {
pass-through {
default-profile ftp-users;
ftp {
banner {
login "JUNOS Rocks!";
}}}}
Given the configuration shown in the exhibit, which configuration object would be used to
associate both Nancy and Walter with firewall user authentication within a security policy?
A. ftp-users
B. ftp-group
C. nancy and walter
D. firewall-user
正解：B
松岛** -
Pass4TestのおかげでJN0-331の試験に合格いたしました、次はJN0-333に挑戦行きたいと思います。今後もお世話になります。