单选题You are an administrator of a large campus network. Every switch on a floor within each building of your campus has been configured for a different VLAN. During implementation of the Junos Pulse Access Control Service, you must configure a RADIUS retur
题目
Add Session-Timeout attribute with value equal to the session lifetime
Add Termination-Action attribute with value equal 1
VLAN
Open port
相似考题
更多“单选题You are an administrator of a large campus network. Every switch on a floor within each building of your campus has been configured for a different VLAN. During implementation of the Junos Pulse Access Control Service, you must configure a RADIUS retur”相关问题
-
第1题：
Which three types of policies must you configure to allow remote users transparent access to protected resources using IF-MAP Federation between a Junos Pulse Secure Access Service and a Junos Pulse Access Control Service?（）
A. Session-Export policies on the Junos Pulse Secure Access Service
B. Session-Export policies on the Junos Pulse Access Control Service
C. Session-Import policies on the Junos Pulse Secure Access Service
D. Session-Import policies on the Junos Pulse Access Control Service
E. Resource access policies on the Junos Pulse Access Control Service
参考答案：A, D, E
-
第2题：
You are an administrator of a large campus network. Every switch on a floor within each building of your campus has been configured for a different VLAN. During implementation of the Junos Pulse Access Control Service, you must configure a RADIUS return attribute policy to apply a role representing a group of authenticated users that frequently transport their laptops from building to building and floor to floor. In the admin GUI, which policy element would you enable to accommodate these users?（）
- A、Add Session-Timeout attribute with value equal to the session lifetime
- B、Add Termination-Action attribute with value equal 1
- C、VLAN
- D、Open port
正确答案:D -
第3题：
When using RADIUS as an external authentication method for 802.1X authentication for the Junos Pulse Access Control Service, what must you do to ensure that the RADIUS authentication works properly?（）
- A、Configure IP helper to forward the authentication requests from the clients to the external RADIUS server
- B、Configure the supplicant as anexternal authentication server
- C、Configure RADIUS proxy on the realm
- D、Specify the correct RADIUS port 389 on the Junos Pulse Access Control Service
正确答案:C -
第4题：
A customer has purchased a third-party switch to use for Layer 2 access with their Junos Pulse Access Controe Service. When configuring the switch on the Junos Pulse Access Control Service, the customer does not find a make/model entry for it . Which two actions should the customer take to make the switch work with the Junos Pulse Access Control Service?（）
- A、Add the switch to the Junos Pulse Access Control Service as a standard RADIUS.
- B、Add the switch to the Junos Pulse Access Control Service using the "Any" make/model.
- C、Add the switch as a firewall enforcer.
- D、Obtain and configure the RADIUS dictionary for the switch and use that vendor listing for the make/model.
正确答案:A,D -
第5题：
You want to provide all users in your corporation with a single agent that provides access to multiple connection types conditionally. For example, you connect to the Junos Pulse Access Control Service if you are connected to the intranet, but you connect to the Junos Pulse Secure Access Service if you are on a remote network. Which agent should you use for this type of connection requirement?（）
- A、Junos Pulse should be configured with location awareness rules configured.
- B、Odyssey Access Client should be installed with Host Checker configured to check the client's location.
- C、Junos Pulse should be configured with all components installed.
- D、Agentless access should be enabled so that clients can connect to any service without concern for installing an agent.
正确答案:A -
第6题：
You have a firewall enforcer receiving resource access policies from a Junos Pulse Access Control Service. You are using Network and Security Manager (NSM) for configuration management on that firewall. The firewall can also be configured using its built-in command-line interface (CLI) or Web-based user interface (WebUI). To avoid conflicting configurations, which two interfaces must you use to configure the firewall enforcer?（）
- A、CLI
- B、WebUI
- C、NSM
- D、Junos Pulse Access Control Service
正确答案:C,D -
第7题：
You are a systems engineer for your company. Your company has 20，000 users in a large campus environment located in Los Angeles. Each department in the company is located in its own building. Each department has its own IT staff， which is responsible for all network administration within the building. The company’s network is divided into several IP subnets that are connected to one another by using dedicated routers. Each building on the company’s main campus contains at least one subnet， and possibly up to five subnets. Each building has at least one router. All routers use RIP version 2 （RIPv2） broadcasts. The company acquires a new business unit located in Denver. The Denver office has 25 users. The network in the Denver office is connected to the network at the main campus by using a leased frame relay connection. The network administrator at the Denver office installs a Windows Server 2003 computer and configures Routing and Remote Access on this server. The network administrator at the Denver office configures this server as a router and implements RIPv2 in Routing and Remote Access. Later， the Denver administrator reports that his router is not receiving routing table updates from the routers on the main campus network. He must manually add routing entries to the routing table to enable connectivity between the locations. You investigate and discover that the RIPv2 broadcasts are not being received at the Denver office. You also discover that no routing table announcements from the Denver office are being received on the main campus network. You need to ensure that the network in the Denver office can communicate with the main campus network and can send and receive automatic routing table updates as network conditions change. What should you do on the router in the Denver office？（）
- A、 Configure the router to use RIPv1 broadcasts.
- B、 Configure the router to use auto-static update mode.
- C、 Add the IP address ranges of the main campus network to the router’s Accept list and Announce list.
- D、 Add the IP addresses of the main campus routers to the router’s Neighbors list.
正确答案:D -
第8题：
单选题You have just created a new VLAN on your network. What is one step that you should include in your VLAN based implementation and verification plan？ （）AVerify that different native VLANs exist between two switches for security purposes.
BVerify that the VLAN was added on all switches with the use of the show vlan command.
CVerify that the switch is configured to allow for trunking on the switch ports.
DVerify that each switch port has the correct IP address space assigned to it for the new VLAN.
正确答案： A解析： 暂无解析 -
第9题：
多选题You have a firewall enforcer receiving resource access policies from a Junos Pulse Access Control Service. You are using Network and Security Manager (NSM) for configuration management on that firewall. The firewall can also be configured using its built-in command-line interface (CLI) or Web-based user interface (WebUI). To avoid conflicting configurations, which two interfaces must you use to configure the firewall enforcer?（）ACLI
BWebUI
CNSM
DJunos Pulse Access Control Service
正确答案： A,D解析： 暂无解析 -
第10题：
单选题You are deploying a Junos Pulse Access Control Service cluster in active/passive mode. How do you configure the IP address on the SRX Series devices?（）AConfigure a single Junos Pulse Access Control Service instance on the enforcer, specifying the VIP as the IP address the instance.
BConfigure multiple Junos Pulse Access Control Service instances on the enforcer, specifying the specific IP address each device in a separate instance.
CConfigure a single Junos Pulse Access Control Service instance on the enforcer, specifying the VIP and active node address in the instance.
DConfigure a single Junos Pulse Access Control Service instance on the enforcer, specifying the VIP and passive node address in the instance.
正确答案： A解析： 暂无解析 -
第11题：
多选题You have three classes of users on your network: employee, contractor, and IT administrator. You configure the Junos Pulse Access Control Service to assign roles to each user class and require that a specific wireless SSID be preconfigured for the Odyssey Access Client based on the role. Which configuration method should you use to satisfy this scenario?（）ACreate a Settings Update file in the Odyssey Access Client Administrator and upload it to the Junos Pulse Access Control Service under User Roles > Agent > Odyssey Settings > Preconfigured Installer.
BConfigure a wired adapter and assign the required SSID under User Roles > Agent > Odyssey Settings.
CCreate a script in the Odyssey Access Client Administrator and upload it to the Junos Pulse Access Control Service under User Roles > Agent > Odyssey Settings > Preconfigured Installer.
DCreate a Preconfiguration file in the Odyssey Access Client Administrator and upload it to the Junos Pulse Access Control Service under User Roles > Agent > Odyssey Settings > Preconfigured Installer.
正确答案： C,A解析： 暂无解析 -
第12题：
单选题You are a systems engineer for your company. Your company has 20，000 users in a large campus environment located in Los Angeles. Each department in the company is located in its own building. Each department has its own IT staff， which is responsible for all network administration within the building. The company’s network is divided into several IP subnets that are connected to one another by using dedicated routers. Each building on the company’s main campus contains at least one subnet， and possibly up to five subnets. Each building has at least one router. All routers use RIP version 2 （RIPv2） broadcasts. The company acquires a new business unit located in Denver. The Denver office has 25 users. The network in the Denver office is connected to the network at the main campus by using a leased frame relay connection. The network administrator at the Denver office installs a Windows Server 2003 computer and configures Routing and Remote Access on this server. The network administrator at the Denver office configures this server as a router and implements RIPv2 in Routing and Remote Access. Later， the Denver administrator reports that his router is not receiving routing table updates from the routers on the main campus network. He must manually add routing entries to the routing table to enable connectivity between the locations. You investigate and discover that the RIPv2 broadcasts are not being received at the Denver office. You also discover that no routing table announcements from the Denver office are being received on the main campus network. You need to ensure that the network in the Denver office can communicate with the main campus network and can send and receive automatic routing table updates as network conditions change. What should you do on the router in the Denver office？（）AConfigure the router to use RIPv1 broadcasts.
BConfigure the router to use auto-static update mode.
CAdd the IP address ranges of the main campus network to the router’s Accept list and Announce list.
DAdd the IP addresses of the main campus routers to the router’s Neighbors list.
正确答案： B解析： 暂无解析 -
第13题：
A company has completed two acquisitions over the previous year. Each of the acquired companies was allowed to keep its own independent authentication server. The network administrator has been asked to roll out the Junos Pulse Access Control Service to users within the original company along with each of the two acquired organizations.The administrator configures three authentication realms, one for each independent authentication server, and associates them all with a single sign-in policy. All of the client endpoints are running Junos Pulse on their Windows XP desktops.When a user signs in to the Junos Pulse Access Control Service, which statement is correct?（）
A. The first authentication realm that was added to the sign-in policy is used by default.
B. The user is allowed to choose the correct authentication realm from a list presented by Junos Pulse.
C. When Junos Pulse is initially installed on the desktop, it must be configured with the correct realm.
D. This is not an allowed configuration; the administrator should configure separate sign-in policies for each realm.
参考答案：B
-
第14题：
Your IT director has decided to allow employees to use their laptops at home as well as in the office. You have deployed the Junos Pulse client to allow access to the offices 802.1X-enabled wired network. Your company also has the Junos Pulse Secure Access Service deployed. You want the Junos Pulse client to automatically launch the appropriate access method depending on each users location. Which three are supported to determine the users location?（）
- A、MAC address
- B、DNS server
- C、DHCP server
- D、resolve address
- E、endpoint address
正确答案:B,D,E -
第15题：
You want to create a security policy on an SRX240 that redirects unauthenticated users back to the Junos Pulse Access Control Service.Which two steps must you take to accomplish this task?（）
- A、Configure a captive-portal service that redirects all traffic back to the Junos Pulse Access Control Service.
- B、Configure a security policy that references the unified-access-control captive-portal service.
- C、Configure a captive-portal service that redirects unauthenticated traffic back to the Junos Pulse Access Control Service.
- D、Configure a security policy that references the unified-access-control intranet-controller service.
正确答案:B,C -
第16题：
Which three types of policies must you configure to allow remote users transparent access to protected resources using IF-MAP Federation between a Junos Pulse Secure Access Service and a Junos Pulse Access Control Service?（）
- A、Session-Export policies on the Junos Pulse Secure Access Service
- B、Session-Export policies on the Junos Pulse Access Control Service
- C、Session-Import policies on the Junos Pulse Secure Access Service
- D、Session-Import policies on the Junos Pulse Access Control Service
- E、Resource access policies on the Junos Pulse Access Control Service
正确答案:A,D,E -
第17题：
You have three classes of users on your network: employee, contractor, and IT administrator. You configure the Junos Pulse Access Control Service to assign roles to each user class and require that a specific wireless SSID be preconfigured for the Odyssey Access Client based on the role. Which configuration method should you use to satisfy this scenario?（）
- A、Create a "Settings Update file" in the Odyssey Access Client Administrator and upload it to the Junos Pulse Access Control Service under "User Roles" > "Agent" > "Odyssey Settings" > "Preconfigured Installer".
- B、Configure a wired adapter and assign the required SSID under "User Roles" > "Agent" > "Odyssey Settings".
- C、Create a script in the Odyssey Access Client Administrator and upload it to the Junos Pulse Access Control Service under "User Roles" > "Agent" > "Odyssey Settings" > "Preconfigured Installer".
- D、Create a "Preconfiguration file" in the Odyssey Access Client Administrator and upload it to the Junos Pulse Access Control Service under "User Roles" > "Agent" > "Odyssey Settings" > "Preconfigured Installer".
正确答案:A,B,D -
第18题：
You are deploying a Junos Pulse Access Control Service cluster in active/passive mode. How do you configure the IP address on the SRX Series devices?（）
- A、Configure a single Junos Pulse Access Control Service instance on the enforcer, specifying the VIP as the IP address the instance.
- B、Configure multiple Junos Pulse Access Control Service instances on the enforcer, specifying the specific IP address each device in a separate instance.
- C、Configure a single Junos Pulse Access Control Service instance on the enforcer, specifying the VIP and active node address in the instance.
- D、Configure a single Junos Pulse Access Control Service instance on the enforcer, specifying the VIP and passive node address in the instance.
正确答案:A -
第19题：
单选题You are validating the configuration of your SRX Series device and see the output shown below. What does this indicate?（）AThe SRX Series device has been configured correctly, the Junos Pulse Access Control Service is reachable on the network, and the SRX Series device is waiting to receive the initial connection from the Junos Pulse Access Control Service.
BThe SRX Series device has confirmed that the Junos Pulse Access Control Service is configured and is reachable on the network, the SRX Series device is waiting to receive the connection from the Junos Pulse Access Control Service, and all that remains to be accomplished is to configure the SRX Series device.
CThe SRX Series device is configured correctly and connected to the Junos Pulse Access Control Service. All that remains to be done to complete the configuration is to configure the SRX Series device on the Junos Pulse Access Control Service.
DBoth the Junos Pulse Access Control Service and the SRX Series device are configured correctly and communicating with each other.
正确答案： The SRX Series device has been configured correctly, the Junos Pulse Access Control Service is reachable on the network, and the SRX Series device is waiting to receive the initial connection from the Junos Pulse Access Control Service., The SRX Series device has confirmed that the Junos Pulse Access Control Service is configured and is reachable on the network, the SRX Series device is waiting to receive the connection from the Junos Pulse Access Control Service, and all that remains to be accomplished is to configure the SRX Series device., The SRX Series device is configured correctly and connected to the Junos Pulse Access Control Service. All that remains to be done to complete the configuration is to configure the SRX Series device on the Junos Pulse Access Control Service., Both the Junos Pulse Access Control Service and the SRX Series device are configured correctly and communicating with each other.解析： 暂无解析 -
第20题：
单选题A company has completed two acquisitions over the previous year. Each of the acquired companies was allowed to keep its own independent authentication server. The network administrator has been asked to roll out the Junos Pulse Access Control Service to users within the original company along with each of the two acquired organizations.The administrator configures three authentication realms, one for each independent authentication server, and associates them all with a single sign-in policy. All of the client endpoints are running Junos Pulse on their Windows XP desktops. When a user signs in to the Junos Pulse Access Control Service, which statement is correct?（）AThe first authentication realm that was added to the sign-in policy is used by default.
BThe user is allowed to choose the correct authentication realm from a list presented by Junos Pulse.
CWhen Junos Pulse is initially installed on the desktop, it must be configured with the correct realm.
DThis is not an allowed configuration; the administrator should configure separate sign-in policies for each realm.
正确答案： C解析： 暂无解析 -
第21题：
单选题You are an administrator of a large campus network. Every switch on a floor within each building of your campus has been configured for a different VLAN. During implementation of the Junos Pulse Access Control Service, you must configure a RADIUS return attribute policy to apply a role representing a group of authenticated users that frequently transport their laptops from building to building and floor to floor. In the admin GUI, which policy element would you enable to accommodate these users?（）AAdd Session-Timeout attribute with value equal to the session lifetime
BAdd Termination-Action attribute with value equal 1
CVLAN
DOpen port
正确答案： D解析： 暂无解析 -
第22题：
单选题You want to provide all users in your corporation with a single agent that provides access to multiple connection types conditionally. For example, you connect to the Junos Pulse Access Control Service if you are connected to the intranet, but you connect to the Junos Pulse Secure Access Service if you are on a remote network. Which agent should you use for this type of connection requirement?（）AJunos Pulse should be configured with location awareness rules configured.
BOdyssey Access Client should be installed with Host Checker configured to check the client's location.
CJunos Pulse should be configured with all components installed.
DAgentless access should be enabled so that clients can connect to any service without concern for installing an agent.
正确答案： A解析： 暂无解析 -
第23题：
单选题When using RADIUS as an external authentication method for 802.1X authentication for the Junos Pulse Access Control Service, what must you do to ensure that the RADIUS authentication works properly?（）AConfigure IP helper to forward the authentication requests from the clients to the external RADIUS server
BConfigure the supplicant as anexternal authentication server
CConfigure RADIUS proxy on the realm
DSpecify the correct RADIUS port 389 on the Junos Pulse Access Control Service
正确答案： C解析： 暂无解析 -
第24题：
单选题You want to provide all users in your corporation with a single agent that provides access to multiple connection types conditionally. For example, you connect to the Junos Pulse Access Control Service if you are connected to the intranet, but you connect to the Junos Pulse Secure Access Service if you are on a remote network. Which agent should you use for this type of connection requirement?（）AJunos Pulse should be configured with location awareness rules configured.
BOdyssey Access Client should be installed with Host Checker configured to check the client's location.
CJunos Pulse should be configured with all components installed.
DAgentless access should be enabled so that clients can connect to any service without concern for installing an agent.
正确答案： C解析： 暂无解析