juniper认证考试

What is the primary purpose of creating a Location Group Policy? ()A、to associate more than one realm with an authentication serverB、to logically group network access devices and associate them with specific sign-in policiesC、to allow or prevent users fro

题目

What is the primary purpose of creating a Location Group Policy? ()

  • A、to associate more than one realm with an authentication server
  • B、to logically group network access devices and associate them with specific sign-in policies
  • C、to allow or prevent users from accessing resources in specific locations on the network
  • D、to define the URL that users of network access devices can use to access the Infranet Controller
参考答案和解析
正确答案:B
如果没有搜索结果,请直接 联系老师 获取答案。
相似问题和答案

第1题:

What are two steps to configure user authentication for a Junos Pulse Access Control Service?()

A. Configure an authentication policy as part of the user role definitions.

B. Configure a Sign-in Policy.

C. Configure authentication agents as part of the user role definitions

D. Configure an authentication policy as part of the authentication realm definition.


参考答案:B, D

第2题:

What is the primary purpose of creating a Location Group Policy? ()

A. to associate more than one realm with an authentication server

B. to logically group network access devices and associate them with specific sign-in policies

C. to allow or prevent users from accessing resources in specific locations on the network

D. to define the URL that users of network access devices can use to access the Infranet Controller


参考答案:B

第3题:

Your network contains a server that runs Windows Server 2008 R2. The server has the Network Policy and Access Services server role installed. You need to allow only members of a global group named Group1 VPN access to the network.What should you do? ()

A. Add Group1 to the RAS and IAS Servers group.

B. Add Group1 to the Network Configuration Operators group.

C. Create a new network policy and define a group-based condition for Group1. Set the access permission of the policy to Access granted. Set the processing order of the policy to 1.

D. Create a new network policy and define a group-based condition for Group1. Set the access permission of the policy to Access granted. Set the processing order of the policy to 3.


参考答案:C

第4题:

What are three valid reasons to assign ports to VLANs on a switch? ()

  • A、to make VTP easier to implement
  • B、to isolate broadcast traffic
  • C、to increase the size of the collision domain
  • D、to allow more devices to connect to the network
  • E、to logically group hosts according to function
  • F、to increase network security

正确答案:B,E,F

第5题:

What are three valid reasons to assign ports on VLANs on a switch?()

A. to make VTP easier to implement

B. to isolate broadcast traffic

C. to increase the size of the collision domain

D. to allow more devices to connect to the network

E. to logically group hosts according to function

F. to increase network security


参考答案:B, E, F

第6题:

A company has completed two acquisitions over the previous year. Each of the acquired companies was allowed to keep its own independent authentication server. The network administrator has been asked to roll out the Junos Pulse Access Control Service to users within the original company along with each of the two acquired organizations.The administrator configures three authentication realms, one for each independent authentication server, and associates them all with a single sign-in policy. All of the client endpoints are running Junos Pulse on their Windows XP desktops.When a user signs in to the Junos Pulse Access Control Service, which statement is correct?()

A. The first authentication realm that was added to the sign-in policy is used by default.

B. The user is allowed to choose the correct authentication realm from a list presented by Junos Pulse.

C. When Junos Pulse is initially installed on the desktop, it must be configured with the correct realm.

D. This is not an allowed configuration; the administrator should configure separate sign-in policies for each realm.


参考答案:B

第7题:

You configure a Group Policy Object for the Marketing organizational unit (OU) to prevent users from accessing My Network Places and from running System in Control Panel. You want the Managers domain local group to be able to access My Network Places, but you still want to prevent them from running System in Control Panel.

What should you do?

A.Add the managers group to the access control list of the GPO. Disable the permission of the managers group to read and apply the group policy.

B.Add the managers group to the access control list of the GPO. Deny the permission of the managers group to read and apply the group policy.

C.Create a second GPO in the OU. Add the managers group to the access control list. Allow the managers group to apply the group policy. Deny the authenticated users group permission to read and apply group policy. Configure the new GPO to deny the ability to run System in Control Panel. Give the original GPO a higher priority than the new GPO.

D.Create a second GPO in the OU. Add the managers group to the access control list. Allow the managers group to read and apply the group policy. Disable the permission of the authenticated user group to read and apply the group policy. Configure the new GPO to allow access to My Network Places. Give the new GPO a higher priority than the original GPO.


正确答案:D
解析:Explanation:InthisscenarioweneedtocreateasecondGPOandapplyitonlytotheManagers.WemustallowaccesstoMyNetworkPlacesinthenewGPO.ThenwegivetheGPOhigherprioritythantheoriginalone.Incorrectanswers:A:WestillrequiretheoriginalGPOtoapplytothemanagers,aswewanttopreventthemfromrunningSysteminControlPanel.ThereforeweshouldnotdisablethepermissionofthemanagersgrouptoreadandapplytheGroupPolicy,asthiswillresultintheGPOnotbeingappliedtotheManagers.B:WestillrequiretheoriginalGPOtoapplytothemanagers,aswewanttopreventthemfromrunningSysteminControlPanel.ThereforeweshouldnotdenythepermissionofthemanagersgrouptoreadandapplytheGroupPolicy,asthiswillresultintheGPOnotbeingappliedtotheManagers.C:WeneedtoallowtheManagersaccesstoMyNetworkPlaces.ThatmustbeconfiguredinthesecondGPO.

第8题:

You are the administrator of a Junos Pulse Access Control Service implementation. You must restrict authenticated users connected from the branch offices to a few specific resources within the data center. However, when the authenticated users are connected at the corporate office, they are allowed more access to the data center resources.You have created two roles with different levels of access and are trying to determine the best way of controlling when a user is mapped to a specific role. Having the user prompted to manually select their role is possible, but you want to automate the process.Which configuration solves this problem?()

A. Implement a RADIUS request attribute policy to assist with realm selection and create different role-mapping rules for the user in each realm.

B. Implement a directory/attribute server on the realm and set up this server to determine by group membership the proper role to which a user should be mapped.

C. Reorder the role-mapping rules to allow for the more open role to be mapped first and then enable the "stop processing rules when this rule matches" function on this role.

D. Implement a Host Checker policy on the realm that determines the geographic location of the device and restricts the user based on the results of the policy.


参考答案:A

第9题:

What are two steps to configure user authentication for a Junos Pulse Access Control Service?()

  • A、Configure an authentication policy as part of the user role definitions.
  • B、Configure a Sign-in Policy.
  • C、Configure authentication agents as part of the user role definitions
  • D、Configure an authentication policy as part of the authentication realm definition.

正确答案:B,D

第10题:

Your company has Active Directory Certificate Services (AD CS) and Network Access Protection (NAP)  deployed on the network. You need to ensure that NAP policies are enforced on portable computers taht  use a wireless connection to access the network. What should you do?()

  • A、 Configure all access points to use 802.1X authentication
  • B、 Configure all protable computers to use MS-CHAP v2 authentication
  • C、 Use the Group Policy Management Console to access the wireless group policy settings, and enable the Prevent connections to ad-hoc networks option.
  • D、 Use the Group Policy Management Console to access the wireless group policy settings, and disable the Prevent connections to infrastructure networks option.

正确答案:A

更多相关问题