多选题Without calling JTAC, which two troubleshooting tools on a MAG Series device would you use to identify the cause of an authentication failure?（）ARemote DebuggingBSystem SnapshotCUser Access logsDPolicy Tracing

题目
多选题
Without calling JTAC, which two troubleshooting tools on a MAG Series device would you use to identify the cause of an authentication failure?（）
A

Remote Debugging

B

System Snapshot

C

User Access logs

D

Policy Tracing

相似考题

1.Which service is provided by a MAG Series device?()A. RoutingB. MPLS VPNsC. Access controlD. Intrusion detection

2.You have configured the Odyssey Access Client with a profile which has the "Disable Server Verification" setting cleared.What will be the result if the device certificate on the MAG Series device has expired and the user attempts to authenticate?（）A. The user will be instructed to call the network administrator.B. The user will fail authentication.C. The user will be prompted to install a new device certificate on the MAG Series device.D. The user will successfully authenticate and have full network access.

3.You have a firewall enforcer protecting resources in a data center. A user is experiencing difficulty connecting to a protected resource.Which two elements must exist so the user can access the resource?（）A. Resource access policy on the MAG Series deviceB. IPsec routing policy on the MAG Series deviceC. General traffic policy blocking access through the firewall enforcerD. Auth table entry on the firewall enforcer

4.Without calling JTAC, which two troubleshooting tools on a MAG Series device would you use to identify the cause of an authentication failure?()A. Remote DebuggingB. System SnapshotC. User Access logsD. Policy Tracing

参考答案和解析
正确答案： B,D
解析： 暂无解析
更多“多选题Without calling JTAC, which two troubleshooting tools on a MAG Series device would you use to identify the cause of an authentication failure?（）ARemote DebuggingBSystem SnapshotCUser Access logsDPolicy Tracing”相关问题

  • 第1题：

    You are trying to deploy a configuration job to an ios access point using the wlse， but the job fails. Which of the following would cause this failure？（）

    • A、snmp communities
    • B、telnet/ssh user/password
    • C、wlccp credentials
    • D、http user/password

    正确答案:B

  • 第2题：

    Which two management-software applications can you use to manage the Cisco Catalyst Express 500 Series Switches?（）

    • A、Cisco Network Assistant
    • B、Cisco Security Device Manager
    • C、Cisco Device Manager
    • D、Cisco Adaptive Security Device Manager

    正确答案:A,C

  • 第3题：

    Without calling JTAC, which two troubleshooting tools on a MAG Series device would you use to identify the cause of an authentication failure?（）

    • A、Remote Debugging
    • B、System Snapshot
    • C、User Access logs
    • D、Policy Tracing

    正确答案:C,D

  • 第4题：

    Bob, a technician, is troubleshooting a PC that intermittently does not power on. Which of the following tools would be the BEST choice to use to verify a possible cause? （）

    • A、Cable tester
    • B、Ohm meter
    • C、Field strength meter
    • D、PSU tester

    正确答案:D

  • 第5题：

    You have a firewall enforcer protecting resources in a data center. A user is experiencing difficulty connecting to a protected resource.Which two elements must exist so the user can access the resource?（）

    • A、Resource access policy on the MAG Series device
    • B、IPsec routing policy on the MAG Series device
    • C、General traffic policy blocking access through the firewall enforcer
    • D、Auth table entry on the firewall enforcer

    正确答案:A,D

  • 第6题：

    You administer a network containing SRX Series firewalls. New policy requires that you implement MAG Series devices to provide access control for end users. The policy requires that the SRX Series devices dynamically enforce security policy based on the source IP address of the user. The policy also requires that the users communicate with protected resources using encrypted traffic. Which two statements are true?（）

    • A、The endpoints can use agentless access.
    • B、Encrypted traffic flows between the endpoint and the enforcer.
    • C、Encrypted traffic flows between the endpoint and the protected resource
    • D、The endpoints can use the Odyssey Access Client.

    正确答案:B,D

  • 第7题：

    Which service is provided by a MAG Series device?（）

    • A、Routing
    • B、MPLS VPNs
    • C、Access control
    • D、Intrusion detection

    正确答案:B

  • 第8题：

    多选题
    You are performing the initial setup of a new MAG Series device and have installed a valid CA- signed certificate on the MAG Series device. Connectivity to an existing SRX Series firewall enforcer cannot be obtained.What are two explanations for this behavior?（）
    A

    The MAG Series device has multiple ports associated with the certificate.

    B

    The MAG Series device's serial number needs to be configured on the SRX Series device.

    C

    The SRX Series device must have a certificate signed by the same authority as the MAG Series device.

    D

    The MAG Series device and SRX Series device are not synchronized to an NTP server.


    正确答案： A,C
    解析： 暂无解析

  • 第9题：

    多选题
    You have a firewall enforcer protecting resources in a data center. A user is experiencing difficulty connecting to a protected resource.Which two elements must exist so the user can access the resource?（）
    A

    Resource access policy on the MAG Series device

    B

    IPsec routing policy on the MAG Series device

    C

    General traffic policy blocking access through the firewall enforcer

    D

    Auth table entry on the firewall enforcer


    正确答案： A,C
    解析： 暂无解析

  • 第10题：

    单选题
    A users Junos Pulse client uses 802.1X to access a wired network and is failing to authenticate. You run a packet capture from the users PC and notice that immediately after the client machine sends an EAPoL-start packet, an EAP-failure packet is returned. You review the RADIUS troubleshooting logs on the MAG Series device and do not see any authentication attempts from the user. Other users on the same Ethernet switch are successfully authenticating. Which device is sending the EAP-failure packet to the workstation?（）
    A

    The RADIUS server

    B

    The EAPoL server

    C

    The workstation's network adapter

    D

    The Ethernet switch


    正确答案： D
    解析： 暂无解析

  • 第11题：

    多选题
    You administer a network containing SRX Series firewalls. New policy requires that you implement MAG Series devices to provide access control for end users. The policy requires that the SRX Series devices dynamically enforce security policy based on the source IP address of the user. The policy also requires that the users communicate with protected resources using encrypted traffic. Which two statements are true?（）
    A

    The endpoints can use agentless access.

    B

    Encrypted traffic flows between the endpoint and the enforcer.

    C

    Encrypted traffic flows between the endpoint and the protected resource

    D

    The endpoints can use the Odyssey Access Client.


    正确答案： B,D
    解析： 暂无解析

  • 第12题：

    多选题
    Which two management-software applications can you use to manage the Cisco Catalyst Express 500 Series Switches?（）
    A

    Cisco Network Assistant

    B

    Cisco Security Device Manager

    C

    Cisco Device Manager

    D

    Cisco Adaptive Security Device Manager


    正确答案： B,A
    解析： 暂无解析

  • 第13题：

    You are trying to deploy a configuration job to an IOS access point using the WLSE， but the jobfails. Which of the following would cause this failure？（）

    • A、SNMP communities
    • B、Telnet/SSH user/password
    • C、WLCCP credentials
    • D、HTTP user/password

    正确答案:B

  • 第14题：

    Before replacing a MAG Series device, using the admin GUI, you export two backup files, system.cfg from "Maintenance" > "ImportfExport Configuration" and user.cfg from "Maintenance" > "Import/Export Users". When you receive the new hardware, you import all of the settings stored in the system.cfg file (including the IP address, network configuration, and device certificates), but you fail to import the user.cfg file. Which three configuration areas were updated by system.cfg?（）

    • A、Cluster configuration settings
    • B、Static routes
    • C、SNMP settings
    • D、Sign-in policies
    • E、MAC authentication realms

    正确答案:A,B,C

  • 第15题：

    A users Junos Pulse client uses 802.1X to access a wired network and is failing to authenticate. You run a packet capture from the users PC and notice that immediately after the client machine sends an EAPoL-start packet, an EAP-failure packet is returned. You review the RADIUS troubleshooting logs on the MAG Series device and do not see any authentication attempts from the user. Other users on the same Ethernet switch are successfully authenticating. Which device is sending the EAP-failure packet to the workstation?（）

    • A、The RADIUS server
    • B、The EAPoL server
    • C、The workstation's network adapter
    • D、The Ethernet switch

    正确答案:D

  • 第16题：

    You are installing a MAG Series device for access control using an SRX Series device as the firewall enforcer. The MAG Series device resides in the same security zone as users. However, the users reside in different subnets and use the SRX Series device as an IP gateway.Which statement is true?（）

    • A、You must configure a security policy on the SRX Series device to allow traffic to flow from the user devices to the MAG Series device.
    • B、No security policy is necessary on the SRX Series device to allow traffic to flow from the user devices to the MAG Series device.
    • C、You must configure host-inbound traffic on the SRX Series device to allow SSL traffic between the MAG Series device and the user devices.
    • D、You must configure host-inbound traffic on the SRX Series device to allow EAP traffic between the MAG Series device and the user devices.

    正确答案:A

  • 第17题：

    Which two external authentication servers are supported for administrative access to a Junos device?（）

    • A、RADIUS
    • B、LDAP
    • C、ACE
    • D、TACACS+

    正确答案:A,D

  • 第18题：

    You are performing the initial setup of a new MAG Series device and have installed a valid CA- signed certificate on the MAG Series device. Connectivity to an existing SRX Series firewall enforcer cannot be obtained.What are two explanations for this behavior?（）

    • A、The MAG Series device has multiple ports associated with the certificate.
    • B、The MAG Series device's serial number needs to be configured on the SRX Series device.
    • C、The SRX Series device must have a certificate signed by the same authority as the MAG Series device.
    • D、The MAG Series device and SRX Series device are not synchronized to an NTP server.

    正确答案:C,D

  • 第19题：

    多选题
    Which two external authentication servers are supported for administrative access to a Junos device?（）
    A

    RADIUS

    B

    LDAP

    C

    ACE

    D

    TACACS+


    正确答案： C,A
    解析： 暂无解析

  • 第20题：

    多选题
    Which two conditions will cause switch-to-wire to occur? （）(Choose two.)
    A

    loss of power

    B

    QoS congestion

    C

    software failure occured

    D

    WX device exceeded its license speed

    E

    traffic does not match application definiton


    正确答案： D,B
    解析： 暂无解析

  • 第21题：

    单选题
    You are installing a MAG Series device for access control using an SRX Series device as the firewall enforcer. The MAG Series device resides in the same security zone as users. However, the users reside in different subnets and use the SRX Series device as an IP gateway.Which statement is true?（）
    A

    You must configure a security policy on the SRX Series device to allow traffic to flow from the user devices to the MAG Series device.

    B

    No security policy is necessary on the SRX Series device to allow traffic to flow from the user devices to the MAG Series device.

    C

    You must configure host-inbound traffic on the SRX Series device to allow SSL traffic between the MAG Series device and the user devices.

    D

    You must configure host-inbound traffic on the SRX Series device to allow EAP traffic between the MAG Series device and the user devices.


    正确答案： C
    解析： 暂无解析

  • 第22题：

    单选题
    You have configured the Odyssey Access Client with a profile which has the "Disable Server Verification" setting cleared.What will be the result if the device certificate on the MAG Series device has expired and the user attempts to authenticate?（）
    A

    The user will be instructed to call the network administrator.

    B

    The user will fail authentication.

    C

    The user will be prompted to install a new device certificate on the MAG Series device.

    D

    The user will successfully authenticate and have full network access.


    正确答案： A
    解析： 暂无解析

  • 第23题：

    多选题
    Before replacing a MAG Series device, using the admin GUI, you export two backup files, system.cfg from "Maintenance" > "ImportfExport Configuration" and user.cfg from "Maintenance" > "Import/Export Users". When you receive the new hardware, you import all of the settings stored in the system.cfg file (including the IP address, network configuration, and device certificates), but you fail to import the user.cfg file. Which three configuration areas were updated by system.cfg?（）
    A

    Cluster configuration settings

    B

    Static routes

    C

    SNMP settings

    D

    Sign-in policies

    E

    MAC authentication realms


    正确答案： C,E
    解析： 暂无解析

相关内容