单选题For which network anomaly does Junos provide a SCREEN?（）A a telnet to port 80B a TCP packet with the SYN and ACK flags setC an SNMP getnext requestD an ICMP packet larger than 1024 bytes

题目
单选题
For which network anomaly does Junos provide a SCREEN?（）
A

a telnet to port 80

B

a TCP packet with the SYN and ACK flags set

C

an SNMP getnext request

D

an ICMP packet larger than 1024 bytes

相似考题

1.Which parameters are valid SCREEN options for combating operating system probes?()A. syn-fin, syn-flood, and tcp-no-fragB. syn-fin, port-scan, and tcp-no-flagC. syn-fin, fin-no-ack, and tcp-no-fragD. syn-fin, syn-ack-ack-proxy, and tcp-no-frag

2.For which network anomaly does Junos provide a SCREEN?()A. a telnet to port 80B. a TCP packet with the SYN and ACK flags setC. an SNMP getnext requestD. an ICMP packet larger than 1024 bytes

3.How does an IPv6 router deal with a packet that is larger than the outgoing interface MTU？（）A、It will fragment the packet at Layer 2.B、It will fragment the packet at Layer 3.C、It will drop the packet and send an ICMPv6 message "packet too big" back to the source.D、It will drop the packet.

4.Regarding fast path processing, when does the system perform the policy check?()A. The policy is determined after the SCREEN options check.B. The policy is determined only during the first packet path, not during fast path.C. The policy is determined after the zone check.D. The policy is determined after the SYN TCP flag.

更多“单选题For which network anomaly does Junos provide a SCREEN?（）A a telnet to port 80B a TCP packet with the SYN and ACK flags setC an SNMP getnext requestD an ICMP packet larger than 1024 bytes”相关问题

  • 第1题：

    Which two statements are correct when you use the reject parameter as the next-hop value for a static route?（）

    • A、The packet is dropped and the packet's source is marked with the no-readvertise parameter.
    • B、The system sends the packet back to the source.
    • C、The packet is dropped from the network.
    • D、The system sends an ICMP message back to the source of the packet.

    正确答案:C,D

  • 第2题：

    For which network anomaly does Junos provide a SCREEN?（）

    • A、a telnet to port 80
    • B、a TCP packet with the SYN and ACK flags set
    • C、an SNMP getnext request
    • D、an ICMP packet larger than 1024 bytes

    正确答案:D

  • 第3题：

    Which two statements describe the difference between JUNOS Software for securityplatforms and a traditional router？（）

    • A、JUNOS Software for security platforms supports NAT and PAT； a traditional router does not support NAT or PAT.
    • B、JUNOS Software for security platforms does not forward traffic by default； a traditional router forwards traffic by default.
    • C、JUNOS Software for security platforms uses session-based forwarding； a traditional router uses packet-based forwarding.
    • D、JUNOS Software for security platforms performs route lookup for every packet； a traditional router performs route lookup only for the first packet.

    正确答案:B,C

  • 第4题：

    给了两段documentation里的描述，问这个时候发哪种类型的ICMP包。 The interface on which the packet comes into the router is the same interface on which the packet gets routed out. The subnet or network of the source IP address is on the same subnet or network of the next-hop IP address of the routed packet.


    正确答案:ICMP类型5重定向消息。

  • 第5题：

    In JUNOS Software， which three packet elements can be inspected to determine if asession already exists？（）

    • A、IP protocol
    • B、IP time-to-live
    • C、source and destination IP address
    • D、source and destination MAC address
    • E、source and destination TCP/UDP port

    正确答案:A,C,E

  • 第6题：

    Which parameters are valid SCREEN options for combating operating system probes？（）

    • A、syn-fin， syn-flood， and tcp-no-frag
    • B、syn-fin， port-scan， and tcp-no-flag
    • C、syn-fin， fin-no-ack， and tcp-no-frag
    • D、syn-fin， syn-ack-ack-proxy， and tcp-no-frag

    正确答案:C

  • 第7题：

    In JUNOS software with enhanced services, which three packet elements are inspected to determineif a session already exists? （）(Choose three.)

    • A、IP protocol
    • B、IP time-to-live
    • C、source and destination IP address
    • D、source and destination MAC address
    • E、source and destination TCP/UDP port

    正确答案:A,C,E

  • 第8题：

    多选题
    Which two statements are correct when you use the reject parameter as the next-hop value for a static route?（）
    A

    The packet is dropped and the packet's source is marked with the no-readvertise parameter.

    B

    The system sends the packet back to the source.

    C

    The packet is dropped from the network.

    D

    The system sends an ICMP message back to the source of the packet.


    正确答案： A,B
    解析： 暂无解析

  • 第9题：

    单选题
    A router receives an IPv6 packet which is 2000 bytes in length. The MTU of the outgoing interface is 1500 bytes. What action will the router take？（）
    A

    forwards the packet

    B

    fragments the packet

    C

    drops the packet silently

    D

    drops the packet and sends an ICMP message


    正确答案： A
    解析： 暂无解析

  • 第10题：

    问答题
    给了两段documentation里的描述，问这个时候发哪种类型的ICMP包。 The interface on which the packet comes into the router is the same interface on which the packet gets routed out. The subnet or network of the source IP address is on the same subnet or network of the next-hop IP address of the routed packet.

    正确答案： ICMP类型5重定向消息。
    解析： 暂无解析

  • 第11题：

    单选题
    Which parameters are valid SCREEN options for combating operating system probes?（）
    A

    syn-fin, syn-flood, and tcp-no-frag

    B

    syn-fin, port-scan, and tcp-no-flag

    C

    syn-fin, fin-no-ack, and tcp-no-frag

    D

    syn-fin, syn-ack-ack-proxy, and tcp-no-frag


    正确答案： B
    解析： 暂无解析

  • 第12题：

    单选题
    Which parameters must you select when configuring operating system probes SCREEN options?（）
    A

    syn-fin, syn-flood, and tcp-no-frag

    B

    syn-fin, port-scan, and tcp-no-flag

    C

    syn-fin, fin-no-ack, and tcp-no-frag

    D

    syn-fin, syn-ack-ack-proxy, and tcp-no-frag


    正确答案： B
    解析： 暂无解析

  • 第13题：

    A router receives an IPv6 packet which is 2000 bytes in length. The MTU of the outgoing interface is 1500 bytes. What action will the router take？（）

    • A、forwards the packet
    • B、fragments the packet
    • C、drops the packet silently
    • D、drops the packet and sends an ICMP message

    正确答案:D

  • 第14题：

    A traditional router is better suited than a firewall device for which function？（）

    • A、VPN establishment
    • B、packet-based forwarding
    • C、stateful packet processing
    • D、Network Address Translation

    正确答案:B

  • 第15题：

    A router receives an IPv6 packet which is 2000 bytes in length. The MTU of the outgoing interface is 1500 bytes. Which action will the router take?（）

    • A、Forward the packet.
    • B、Fragment the packet.
    • C、Drop the packet silently.
    • D、Drop the packet and send an ICMPv6 message.

    正确答案:D

  • 第16题：

    Which two statements are true about network voice traffic？ （Choose two.）（）

    • A、 Voice traffic is affected more by link speed than FTP traffic is.
    • B、 Voice traffic is affected more by packet delays than FTP traffic is.
    • C、 Voice streams involve larger packet sizes than most TCP network traffic involves.
    • D、 Voice traffic is more sensitive to packet loss than TCP network traffic is.
    • E、 Voice traffic requires QOS mechanisms only in heavily loaded network segments.

    正确答案:B,D

  • 第17题：

    Which parameters must you select when configuring operating system probes SCREEN options?（）

    • A、syn-fin, syn-flood, and tcp-no-frag
    • B、syn-fin, port-scan, and tcp-no-flag
    • C、syn-fin, fin-no-ack, and tcp-no-frag
    • D、syn-fin, syn-ack-ack-proxy, and tcp-no-frag

    正确答案:C

  • 第18题：

    Which two statements about JUNOS Software packet handling are correct？（）

    • A、JUNOS Software applies service ALGs only for the first packet of a flow.
    • B、JUNOS Software uses fast-path processing only for the first packet of a flow.
    • C、JUNOS Software performs route and policy lookup only for the first packet of a flow.
    • D、JUNOS Software applies SCREEN options for both first and consecutive packets of a flow.

    正确答案:C,D

  • 第19题：

    多选题
    In JUNOS Software， which three packet elements can be inspected to determine if asession already exists？（）
    A

    IP protocol

    B

    IP time-to-live

    C

    source and destination IP address

    D

    source and destination MAC address

    E

    source and destination TCP/UDP port


    正确答案： D,B
    解析： 暂无解析

  • 第20题：

    多选题
    Which two statements about Junos software packet handling are correct?（）(Choose two.)
    A

    The Junos OS applies service ALGs only for the first packet of a flow.

    B

    The Junos OS uses fast-path processing only for the first packet of a flow.

    C

    The Junos OS performs policy lookup only for the first packet of a flow.

    D

    The Junos OS applies SCREEN options for both first and consecutive packets of a flow.


    正确答案： C,B
    解析： 暂无解析

  • 第21题：

    多选题
    In JUNOS software with enhanced services, which three packet elements are inspected to determineif a session already exists? （）(Choose three.)
    A

    IP protocol

    B

    IP time-to-live

    C

    source and destination IP address

    D

    source and destination MAC address

    E

    source and destination TCP/UDP port


    正确答案： C,A
    解析： 暂无解析

  • 第22题：

    单选题
    A router receives an IPv6 packet which is 2000 bytes in length. The MTU of the outgoing interface is 1500 bytes. Which action will the router take?（）
    A

    Forward the packet.

    B

    Fragment the packet.

    C

    Drop the packet silently.

    D

    Drop the packet and send an ICMPv6 message.


    正确答案： B
    解析： 暂无解析

  • 第23题：

    单选题
    How does an IPv6 router deal with a packet that is larger than the outgoing interface MTU？（）
    A

    It will fragment the packet at Layer 2.

    B

    It will fragment the packet at Layer 3.

    C

    It will drop the packet and send an ICMPv6 message packet too big back to the source.

    D

    It will drop the packet.


    正确答案： C
    解析： 暂无解析

相关内容