问题：多选题You administer a network containing SRX Series firewalls. New policy requires that you implement MAG Series devices to provide access control for end users. The policy requires that the SRX Series devices dynamically enforce security policy based on the source IP address of the user. The policy also requires that the users communicate with protected resources using encrypted traffic. Which two statements are true?（）AThe endpoints can use agentless access.BEncrypted traffic flows between the endpoint and the enforcer.CEncrypted traffic flows between the endpoint and the protected resourceDThe endpoints can use the Odyssey Access Client.

Wednesday, April 10, 2024

问题：单选题Which parameter do you use to enable Junos Pulse Access Control Service enforcement on a policy on a ScreenOS platform?（）A uac-policyB ic-policyC inyranet-authD uac-auth

Monday, April 22, 2024

问题：多选题You administer a network containing SRX Series firewalls. New policy requires that you implement MAG Series devices to provide access control for end users. The policy requires that the SRX Series devices dynamically enforce security policy based on the source IP address of the user. The policy also requires that the users communicate with protected resources using encrypted traffic. Which two statements are true?（）AThe endpoints can use agentless access.BEncrypted traffic flows between the endpoint and the enforcer.CEncrypted traffic flows between the endpoint and the protected resourceDThe endpoints can use the Odyssey Access Client.

Wednesday, April 10, 2024

问题：单选题An outside vendor is eligible for the guest role and the contractor role when accessing your network, that is secured with the Junos Pulse Access Control Service.What is the default role-mapping behavior?（）A The vendor must select a role from a list of eligible roles.B The vendor must select a rule from a list of eligible rules.C The vendor is automatically mapped to the first configured roleD The vendor is automatically granted a merged role.

Wednesday, April 10, 2024

问题：单选题Two MAG4610s are running in an active/passive cluster configuration. The system administrator is planning to apply a service package to the cluster.Which process should the administrator follow?（）A Perform the upgrade on the active node of the cluster. When completed, the node reboots and then pushes the service package to the passive node automatically.B Perform the upgrade on the passive node of the cluster. When completed, the node reboots and then pushes the service package to the active node automatically.C On the clustering status page, disable the active node. Perform the upgrade on the disabled node. When completed and the node reboots, enable the node on the clustering status page.Repeat the process on the passive node.D On the clustering status page, disable the passive node. Perform the upgrade on the disabled node. When completed and the node reboots, enable the node on the clustering status page.Repeat the process on the active node.

Saturday, December 17, 2022

问题：多选题What are two features provided by the Junos Pulse client?（）A802.1XBvideo messagingCIPsecDVoIP

Wednesday, April 10, 2024

问题：多选题Which three authentication server types are supported for retrieving user attributes used in role- mapping rules?（）ALDAPBS/KeyCTACACS+DRADIUSESiteMinder

Wednesday, February 14, 2024

问题：多选题Which three types of policies must you configure to allow remote users transparent access to protected resources using IF-MAP Federation between a Junos Pulse Secure Access Service and a Junos Pulse Access Control Service?（）ASession-Export policies on the Junos Pulse Secure Access ServiceBSession-Export policies on the Junos Pulse Access Control ServiceCSession-Import policies on the Junos Pulse Secure Access ServiceDSession-Import policies on the Junos Pulse Access Control ServiceEResource access policies on the Junos Pulse Access Control Service

Monday, April 22, 2024

问题：单选题You have configured the Odyssey Access Client with a profile which has the "Disable Server Verification" setting cleared.What will be the result if the device certificate on the MAG Series device has expired and the user attempts to authenticate?（）A The user will be instructed to call the network administrator.B The user will fail authentication.C The user will be prompted to install a new device certificate on the MAG Series device.D The user will successfully authenticate and have full network access.

Sunday, December 10, 2023

问题：多选题You are performing the initial setup of a new MAG Series device and have installed a valid CA- signed certificate on the MAG Series device. Connectivity to an existing SRX Series firewall enforcer cannot be obtained.What are two explanations for this behavior?（）AThe MAG Series device has multiple ports associated with the certificate.BThe MAG Series device's serial number needs to be configured on the SRX Series device.CThe SRX Series device must have a certificate signed by the same authority as the MAG Series device.DThe MAG Series device and SRX Series device are not synchronized to an NTP server.

Monday, April 22, 2024

问题：多选题Which three authentication server types are supported for retrieving user attributes used in role- mapping rules?（）ALDAPBS/KeyCTACACS+DRADIUSESiteMinder

Saturday, July 15, 2023

问题：单选题You have created a Host Checker policy that contains multiple rules. You want to inform end users which rule specifically has failed.In the admin GUI, which configuration setting would you enable?（）A Enable Custom InstructionsB Pre-auth notificationC Remediation messageD Send reason strings

Monday, August 7, 2023

问题：多选题A customer wants to create a custom Junos Pulse configuration. Which two are required?（）AConnection setBConfiguration setCCustom installerDComponent set

Saturday, February 3, 2024

问题：多选题In the Junos Pulse Access Control Service, which three actions are only available in the admin GUI? （）ATake a System SnapshotBConfigure LicensingCReview the EventsDSet the date and timeEUpgrade or downgrade the firmware

Thursday, July 27, 2023

问题：多选题You are configuring an SRX210 as a firewall enforcer that will tunnel IPsec traffic from several Junos Pulse users.Which two parameters must you configure on the SRX210?（）Aaccess profileBIKE parametersCtunneled interfaceDredirect policy

Monday, August 7, 2023

问题：单选题You want to create a Host Checker policy that looks for a specific antivirus product that is running on your client machines, but the predefined antivirus options do not include the antivirus product version that you use.Which feature should you verify the antivirus product is up to date?（）A Enhanced Endpoint SecurityB DP signaturesC Antivirus licensingD Endpoint Security Assessment Plug-in

Wednesday, April 10, 2024

问题：多选题A customer has purchased a new Junos Pulse Access Control Service and wants to install it in an existing cluster.After initial configuration, the customer finds that the firmware version running on the Junos Pulse Access Control Service is 4.1 r5, but the existing cluster is running firmware version 4.1 r3. Which two actions must be performed to allow the new Junos Pulse Access Control Service to load the older version of firmware?（）AInstall a valid license on the new Junos Pulse Access Control Service.BWhen loading the older firmware, delete all the existing data on the Junos Pulse Access Control Service.CAdd the new Junos Pulse Access Control Service to the existing cluster.DDownload the 4.1 r3 version firmware from the Juniper support website.

Wednesday, February 14, 2024

问题：单选题Which Junos Pulse feature allows the user to log in once through a Junos Pulse Secure Access Service on the network and then access resources protected by a Junos Pulse Access Control Service without reauthentication?（）A Roaming SessionB Session MigrationC Location AwarenessD Persistent Session

Wednesday, February 14, 2024

问题：单选题You are installing a new deployment of the Junos Pulse Access Control Service. In your environment, you have VoIP handsets that support 802.1X authentication with EAP-MD5.Which deployment constraint must you consider?（）A EAP-MD5 is not supported by the Junos Pulse Access Control ServiceB EAP-MD5 requires passwords to be stored in an encrypted format.C EAP-MD5 requires passwords to be stored in a clear text format.D EAP-MD5 performs a real time hash of the handset's MAC address.

Wednesday, February 14, 2024

问题：多选题Which three features are supported with the Junos Pulse client?（）Athird-party RADIUS supportBHost EnforcerCHost CheckerDIPsecEsoft tokens

Friday, October 27, 2023