多选题What are two rulebase types within an IPS policy on an SRX Series device?（） (Choose two.)Arulebase-ipsBrulebase-ignoreCrulebase-idpDrulebase-exempt

题目
多选题
What are two rulebase types within an IPS policy on an SRX Series device?（） (Choose two.)
A

rulebase-ips

B

rulebase-ignore

C

rulebase-idp

D

rulebase-exempt

相似考题

1.Click the Exhibit button.What are two valid reasons for the output shown in the exhibit?() (Choose two.)A. The local Web-filtering daemon is not enabled or is not running.B. The integrated Web-filtering policy server is not reachable.C. No DNS is configured on the SRX Series device.D. No security policy is configured to use Web filtering.

2.Which two statements are true about the Websense redirect Web filter solution? ()(Choose two.)A. The Websense redirect Web filter solution does not require a license on the SRX device.B. The Websense server provides the SRX device with a category for the URL and the SRX device then matches the category decides to permit or deny the URL.C. The Websense server provides the SRX device with a decision as to whether the SRX device permits or denies the URL.D. When the Websense server does not know the category of the URL, it sends a request back to the SRX device SurfControl server in the cloud.

3.You are validating the configuration of your SRX Series device and see the output shown below.What does this indicate?()A.The SRX Series device has been configured correctly, the Junos Pulse Access Control Service is reachable on the network, and the SRX Series device is waiting to receive the initial connection from the Junos Pulse Access Control Service.B.The SRX Series device has confirmed that the Junos Pulse Access Control Service is configured and is reachable on the network, the SRX Series device is waiting to receive the connection from the Junos Pulse Access Control Service, and all that remains to be accomplished is to configure the SRX Series device.C.The SRX Series device is configured correctly and connected to the Junos Pulse Access Control Service. All that remains to be done to complete the configuration is to configure the SRX Series device on the Junos Pulse Access Control Service.D.Both the Junos Pulse Access Control Service and the SRX Series device are configured correctly and communicating with each other.

4.Antispam can be leveraged with which two features on a branch SRX Series device to provide maximum protection from malicious e－mail content? ()(Choose two.)A. integrated Web filteringB. full AVC. IPSD. local Web filtering

更多“多选题What are two rulebase types within an IPS policy on an SRX Series device?（） (Choose two.)Arulebase-ipsBrulebase-ignoreCrulebase-idpDrulebase-exempt”相关问题

  • 第1题：

    What are two rulebase types within an IPS policy on an SRX Series device?() (Choose two.)

    A.rulebase-ips

    B.rulebase-ignore

    C.rulebase-idp

    D.rulebase-exempt


    参考答案：A, D

  • 第2题：

    What are two ways to verify if a WX device is configured as a hub, a spoke, or a mesh device? ()(Choose two.)

    A. Admin > Device

    B. Device Setup > Topology

    C. Compression > Endpoints

    D. Device Setup > Advanced > Topology


    参考答案：C, D

  • 第3题：

    What are two rulebase types within an IPS policy on an SRX Series device?（） (Choose two.)

    • A、rulebase-ips
    • B、rulebase-ignore
    • C、rulebase-idp
    • D、rulebase-exempt

    正确答案:A,D

  • 第4题：

    You are installing a MAG Series device for access control using an SRX Series device as the firewall enforcer. The MAG Series device resides in the same security zone as users. However, the users reside in different subnets and use the SRX Series device as an IP gateway.Which statement is true?（）

    • A、You must configure a security policy on the SRX Series device to allow traffic to flow from the user devices to the MAG Series device.
    • B、No security policy is necessary on the SRX Series device to allow traffic to flow from the user devices to the MAG Series device.
    • C、You must configure host-inbound traffic on the SRX Series device to allow SSL traffic between the MAG Series device and the user devices.
    • D、You must configure host-inbound traffic on the SRX Series device to allow EAP traffic between the MAG Series device and the user devices.

    正确答案:A

  • 第5题：

    Antispam can be leveraged with which two features on a branch SRX Series device to provide maximum protection from malicious e-mail content? （）(Choose two.)

    • A、integrated Web filtering
    • B、full AV
    • C、IPS
    • D、local Web filtering

    正确答案:B,C

  • 第6题：

    What are two alternatives to configuring a full mesh of IBGP peers within your AS? （）(Choose two.)

    • A、multihop
    • B、communities
    • C、confederations
    • D、route reflection

    正确答案:C,D

  • 第7题：

    多选题
    Which three are necessary for antispam to function properly on a branch SRX Series device? （）(Choose three.)
    A

    an antispam license

    B

    DNS servers configured on the SRX Series device

    C

    SMTP services on SRX

    D

    a UTM profile with an antispam configuration in the appropriate security policy

    E

    antivirus (full or express)


    正确答案： B,C
    解析： 暂无解析

  • 第8题：

    多选题
    What are two rulebase types within an IPS policy on an SRX Series device?（） (Choose two.)
    A

    rulebase-ips

    B

    rulebase-ignore

    C

    rulebase-idp

    D

    rulebase-exempt


    正确答案： D,C
    解析： 暂无解析

  • 第9题：

    多选题
    An RSVP session is maintained with the periodic exchange of which two message types?（） (Choose two.)
    A

    path

    B

    resv

    C

    session

    D

    keepalive


    正确答案： A,B
    解析： 暂无解析

  • 第10题：

    多选题
    Which two types of optimization does the WX 60 device perform when Exchange 2003 and Outlook 2003 areused in the network? （）(Choose two.)
    A

    Packet Flow Acceleration

    B

    Network Sequence Caching

    C

    AppFlow's MAPI acceleration

    D

    Molecular Sequence Reduction


    正确答案： A,B
    解析： 暂无解析

  • 第11题：

    多选题
    Which three situations will trigger an e-mail to be flagged as spam if a branch SRX Series device has been properly configured with antispam inspection enabled for the appropriate security policy? （）(Choose three.)
    A

    The server sending the e-mail to the SRX Series device is a known open SMTP relay.

    B

    The server sending the e-mail to the SRX Series device is running unknown SMTP server software.

    C

    The server sending the e-mail to the SRX Series device is on an IP address range that is known to be dynamically assigned.

    D

    The e-mail that the server is sending to the SRX Series device has a virus in its attachment.

    E

    The server sending the e-mail to the SRX Series device is a known spammer IP address.


    正确答案： D,C
    解析： 暂无解析

  • 第12题：

    多选题
    Which two statements are true about the Websense redirect Web filter solution? （）(Choose two.)
    A

    The Websense redirect Web filter solution does not require a license on the SRX device.

    B

    The Websense server provides the SRX device with a category for the URL and the SRX device then matches the category decides to permit or deny the URL.

    C

    The Websense server provides the SRX device with a decision as to whether the SRX device permits or denies the URL.

    D

    When the Websense server does not know the category of the URL, it sends a request back to the SRX device SurfControl server in the cloud.


    正确答案： B,C
    解析： 暂无解析

  • 第13题：

    What are two alternatives to configuring a full mesh of IBGP peers within your AS? ()(Choose two.)

    A.multihop

    B.communities

    C.confederations

    D.route reflection


    参考答案：C, D

  • 第14题：

    What are two types of WebView monitoring statistics on the WX／WXC platforms?() (Choose two.)

    A.LAN

    B.QoS

    C.traffic

    D.IPSec


    参考答案：B, C

  • 第15题：

    What are two types of WebView monitoring statistics on the WX/WXC platforms?（） (Choose two.)

    • A、LAN
    • B、QoS
    • C、traffic
    • D、IPSec

    正确答案:B,C

  • 第16题：

    What are two ways to verify if a WX device is configured as a hub, a spoke, or a mesh device? （）(Choose two.)

    • A、Admin > Device
    • B、Device Setup > Topology
    • C、Compression > Endpoints
    • D、Device Setup > Advanced > Topology

    正确答案:C,D

  • 第17题：

    Which three situations will trigger an e-mail to be flagged as spam if a branch SRX Series device has been properly configured with antispam inspection enabled for the appropriate security policy? （）(Choose three.)

    • A、The server sending the e-mail to the SRX Series device is a known open SMTP relay.
    • B、The server sending the e-mail to the SRX Series device is running unknown SMTP server software.
    • C、The server sending the e-mail to the SRX Series device is on an IP address range that is known to be dynamically assigned.
    • D、The e-mail that the server is sending to the SRX Series device has a virus in its attachment.
    • E、The server sending the e-mail to the SRX Series device is a known spammer IP address.

    正确答案:A,C,E

  • 第18题：

    You are performing the initial setup of a new MAG Series device and have installed a valid CA- signed certificate on the MAG Series device. Connectivity to an existing SRX Series firewall enforcer cannot be obtained.What are two explanations for this behavior?（）

    • A、The MAG Series device has multiple ports associated with the certificate.
    • B、The MAG Series device's serial number needs to be configured on the SRX Series device.
    • C、The SRX Series device must have a certificate signed by the same authority as the MAG Series device.
    • D、The MAG Series device and SRX Series device are not synchronized to an NTP server.

    正确答案:C,D

  • 第19题：

    多选题
    Antispam can be leveraged with which two features on a branch SRX Series device to provide maximum protection from malicious e-mail content? （）(Choose two.)
    A

    integrated Web filtering

    B

    full AV

    C

    IPS

    D

    local Web filtering


    正确答案： B,D
    解析： 暂无解析

  • 第20题：

    多选题
    What are two ways to verify if a WX device is configured as a hub, a spoke, or a mesh device? （）(Choose two.)
    A

    Admin > Device

    B

    Device Setup > Topology

    C

    Compression > Endpoints

    D

    Device Setup > Advanced > Topology


    正确答案： A,B
    解析： 暂无解析

  • 第21题：

    多选题
    What are two types of WebView monitoring statistics on the WX/WXC platforms?（） (Choose two.)
    A

    LAN

    B

    QoS

    C

    traffic

    D

    IPSec


    正确答案： D,B
    解析： 暂无解析

  • 第22题：

    多选题
    You are performing the initial setup of a new MAG Series device and have installed a valid CA- signed certificate on the MAG Series device. Connectivity to an existing SRX Series firewall enforcer cannot be obtained.What are two explanations for this behavior?（）
    A

    The MAG Series device has multiple ports associated with the certificate.

    B

    The MAG Series device's serial number needs to be configured on the SRX Series device.

    C

    The SRX Series device must have a certificate signed by the same authority as the MAG Series device.

    D

    The MAG Series device and SRX Series device are not synchronized to an NTP server.


    正确答案： A,C
    解析： 暂无解析

  • 第23题：

    多选题
    What are two alternatives to configuring a full mesh of IBGP peers within your AS? （）(Choose two.)
    A

    multihop

    B

    communities

    C

    confederations

    D

    route reflection


    正确答案： B,C
    解析： 暂无解析

  • 第24题：

    多选题
    Which two types of nodes are included in an MPLS explicit route? （）(Choose two.)
    A

    peer

    B

    strict

    C

    loose

    D

    system


    正确答案： B,C
    解析： 暂无解析

相关内容