CMS专题
单选题Regarding zone types， which statement is true？（）A You cannot assign an interface to a functional zone.B You can specifiy a functional zone in a security policy.C Security zones must have a scheduler applied.D You can use a security zone for traffic des
题目
You cannot assign an interface to a functional zone.
You can specifiy a functional zone in a security policy.
Security zones must have a scheduler applied.
You can use a security zone for traffic destined for the device itself.
相似问题和答案
第1题：
A. There are five phases of IKE negotiation.
B. There are two phases of IKE negotiation.
C. IPsec VPN tunnels are not supported on SRX Series devices.
D. IPsec VPNs require a tunnel PIC in SRX Series devices.
第2题：
Which statement is true regarding Backup tasks in Cisco UCS？（）
- A、 They are created automatically and stored on the FI
- B、 They are created manually and exported to a remote server
- C、 They are automatically scheduled to run every 24 hours
- D、 They are manually scheduled and stored on the FI
正确答案:B
第3题：
A. Traffic is permitted from the trust zone to the untrust zone.
B. Intrazone traffic in the trust zone is permitted.
C. All traffic through the device is denied.
D. The policy is matched only when no other matching policies are found.
第4题：
In the Junos OS, which statement is true?（）
- A、vlan.0 belongs to the untrust zone.
- B、You must configure Web authentication to allow inbound traffic in the untrust zone.
- C、The zone name "untrust" has no special meaning.
- D、The untrust zone is not configurable.
正确答案:C
第5题：
Which statement is true about interface-based source NAT？（）
- A、PAT is a requirement.
- B、It requires you to configure address entries in the junos-nat zone.
- C、It requires you to configure address entries in the junos-global zone.
- D、The IP addresses being translated must be in the same subnet as the egress interface.
正确答案:A
第6题：
A. It also supports PAT.
B. It requires you to configure address entries in the junos-nat zone.
C. It requires you to configure address entries in the junos-global zone.
D. The IP addresses being translated must be in the same subnet as the incoming interface.
第7题：
Which statement is true regarding the forwarding plane?（）
- A、The forwarding plane is contained within the Routing Engine (RE)
- B、The forwarding plane processes and evaluates exception traffic
- C、The forwarding plane contains the Packet Forwarding Engine (PFE)
- D、The forwarding plane is not present on all platforms running the Junos OS
正确答案:C
第8题：
A. vlan.0 belongs to the untrust zone.
B. You must configure Web authentication to allow inbound traffic in the untrust zone.
C. The zone name "untrust" has no special meaning.
D. The untrust zone is not configurable.
第9题：
Which statement is true regarding the INTERSECT operator?（）
- A、It ignores NULL values
- B、Reversing the order of the intersected tables alters the result
- C、The names of columns in all SELECT statements must be identical
- D、The number of columns and data types must be identical for all SELECT statements in the query
正确答案:D
第10题：
Which statement is true regarding syslog on Junos devices?（）
- A、No logging is enabled by default
- B、By default the information is stored in all file named events
- C、Only the message severity level must be configured
- D、You can configure the router to send log messages to the console
正确答案:D