单选题Using a policy with the policy-rematch flag enabled， what happens to the existing and newsessions when you change the policy action from permit to deny？（）A The new sessions matching the policy are denied. The existing sessions are dropped.B The new ses

第1题：

第2题：

After applying the policy-rematch statement under the security policies stanza, what would happen to an existing flow if the policy source address or the destination address is changed and committed?（）

• A、The Junos OS drops any flow that does not match the source address or destination address.
• B、All traffic is dropped.
• C、All existing sessions continue.
• D、The Junos OS does a policy re-evaluation.

第3题：

第4题：

Using a policy with the policy-rematch flag enabled, what happens to the existing and new sessions when you change the policy action from permit to deny?（）

• A、The new sessions matching the policy are denied. The existing sessions are dropped.
• B、The new sessions matching the policy are denied. The existingsessions, not being allowed tocarry any traffic, simply timeout.
• C、The new sessions matching the policy might be allowed through if they match another policy. The existing sessions are dropped.
• D、The new sessions matching the policy are denied. The existing sessions continue until they are completed or their time.

第5题：

In the exhibit， you decided to change myHosts addresses. [edit security policies] user@host# show from-zone Private to-zone External { policy MyTraffic { match { source-address myHosts； destination-address  ExtServers；application  [ junos-ftp junos-bgp ]； } then { permit { tunnel { ipsec-vpn vpnTunnel； } } } } } policy-rematch； What will happen to the new sessions matching the policy and in-progress sessions that hadalready matched the policy？（）

• A、New sessions will be evaluated. In-progress sessions will be re-evaluated.
• B、New sessions will be evaluated. All in-progress sessions will continue.
• C、New sessions will be evaluated. All in-progress sessions will be dropped.
• D、New sessions will halt until all in-progress sessions are re-evaluated. In-progress sessions will be re-evaluated and possibly dropped.

第6题：

第7题：

You need to configure Active Directory to implement the new password policy for the HR department. What should you do？（）

• A、Create a new child domain named hr.ad.margiestravel.com in the existing forest. Move the resources from the HR OU to this new domain. Add the appropriate security settings in the Default Domain Policy for this new domain.
• B、Add the appropriate security settings to the current Default Domain Policy.
• C、Add the appropriate security settings to the local security policy of SQL1.
• D、Set the SQL server check_policy and check_expiration options to On when creating all user accounts.

第8题：

第9题：

In the configuration shown in the exhibit， you decided to eliminate the junos-ftp applicationfrom the match condition of the policy MyTraffic. [edit security policies] user@hostl# show from-zone Private to-zone External { policy MyTraffic { match { source-address myHosts； destination-address ExtServers； application [ junos-ftp junos-bgp ]； } then { permit { tunnel { ipsec-vpn vpnTunnel； } } } } } policy-rematch； What will happen to the existing FTP and BGP sessions？（）

• A、The existing FTP and BGP sessions will continue.
• B、The existing FTP and BGP sessions will be re-evaluated and only FTP sessions will be dropped.
• C、The existing FTP and BGP sessions will be re-evaluated and all sessions will be dropped.
• D、The existing FTP sessions will continue and only the existing BGP sessions will be dropped.

第10题：

Using a policy with the policy-rematch flag enabled, what happens to the existing and new sessionswhen you change the policy action from permit to deny? （）

• A、The new sessions matching the policy are denied. The existing sessions are dropped.
• B、The new sessions matching the policy are denied. The existing sessions, not being allowed to carry any traffic, simply timeout.
• C、The new sessions matching the policy might be allowed through if they match another policy. The existing sessions are dropped.
• D、The new sessions matching the policy are denied. The existing sessions continue until they are completed or their timeout is reached.