单选题Regarding secure tunnel （st） interfaces， which statement is true？（）A You cannot assign st interfaces to a security zone.B You cannot apply static NAT on an st interface logical unit.C st interfaces are optional when configuring a route-based VPND A sta

题目
单选题
Regarding secure tunnel （st） interfaces， which statement is true？（）
A

You cannot assign st interfaces to a security zone.

B

You cannot apply static NAT on an st interface logical unit.

C

st interfaces are optional when configuring a route-based VPN

D

A static route can reference the st interface logical unit as the next-hop

相似考题

1.You want to create an out－of－band management zone and assign the ge－0／0／0.0 interface to that zone.From the [edit] hierarchy, which command do you use to configure this assignment?()A. set security zones management interfaces ge-0/0/0.0B. set zones functional-zone management interfaces ge-0/0/0.0C. set security zones functional-zone management interfaces ge-0/0/0.0D. set security zones functional-zone out-of-band interfaces ge-0/0/0.0

2.Which command would you use to view interface usage details in real time?()A. show interfaces terseB. show interfaces extensiveC. monitor interface trafficD. monitor traffic interface

3.Which command would you type to see a concise display of which interfaces are up and which are down?()A.show interfaces briefB.show interfaces statusC.show ip interface briefD.show interfaces terse

4.Which two statements are true about hierarchical architecture? ()(Choose two.)A. You can assign a logical interface to multiple zones.B. You cannot assign a logical interface to multiple zones.C. You can assign a logical interface to multiple routing instances.D. You cannot assign a logical interface to multiple routing instances.

更多“单选题Regarding secure tunnel （st） interfaces， which statement is true？（）A You cannot assign st interfaces to a security zone.B You cannot apply static NAT on an st interface logical unit.C st interfaces are optional when configuring a route-based VPND A sta”相关问题

  • 第1题：

    You wish to increase the security of all of the routers within your network. What can be done to secure the virtual terminal interfaces on a router?()

    A. Administratively shut down the interface.

    B. Physically secure the interface.

    C. Create an access list and apply it to the virtual terminal interfaces with the access-group command.

    D. Configure a virtual terminal password and login process.

    E. Enter an access list and apply it to the virtual terminal interfaces using the access-class command.


    参考答案：D, E

  • 第2题：

    You want to implement a high availability network using two Cisco routers. You also want to  ensure that the stat of the WAN interfaces can be tracked in doing so.  Which router redundancy  protocol cannot be configured for interface tracking？ （）

    • A、 GLBP
    • B、 HSRP
    • C、 RPR
    • D、 VRRP
    • E、 SLB
    • F、 RPR+
    • G、 None of the other alternatives apply

    正确答案:D

  • 第3题：

    Which interface is used for RTO synchronization and forwarding traffic between the devices in a cluster?（）

    • A、the st interface
    • B、the reth interface
    • C、the fxp1 and fxp0 interfaces
    • D、the fab0 and fab1 interfaces

    正确答案:D

  • 第4题：

    Which two steps are performed when configuring a zone？（）

    • A、Define a default policy for the zone.
    • B、Assign logical interfaces to the zone.
    • C、Assign physical interfaces to the zone.
    • D、Define the zone as a security or functional zone

    正确答案:B,D

  • 第5题：

    Regarding secure tunnel （st） interfaces， which statement is true？（）

    • A、You cannot assign st interfaces to a security zone.
    • B、You cannot apply static NAT on an st interface logical unit.
    • C、st interfaces are optional when configuring a route-based VPN
    • D、A static route can reference the st interface logical unit as the next-hop

    正确答案:D

  • 第6题：

    Which two statements are true about hierarchical architecture? （）(Choose two.)

    • A、You can assign a logical interface to multiple zones.
    • B、You cannot assign a logical interface to multiple zones.
    • C、You can assign a logical interface to multiple routing instances.
    • D、You cannot assign a logical interface to multiple routing instances.

    正确答案:B,D

  • 第7题：

    Regarding zone types， which statement is true？（）

    • A、You cannot assign an interface to a functional zone.
    • B、You can specifiy a functional zone in a security policy.
    • C、Security zones must have a scheduler applied.
    • D、You can use a security zone for traffic destined for the device itself.

    正确答案:D

  • 第8题：

    单选题
    You want to create an out-of-band management zone and assign the ge-0/0/0.0 interface to that zone.From the [edit] hierarchy, which command do you use to configure this assignment?（）
    A

    set security zones management interfaces ge-0/0/0.0

    B

    set zones functional-zone management interfaces ge-0/0/0.0

    C

    set security zones functional-zone management interfaces ge-0/0/0.0

    D

    set security zones functional-zone out-of-band interfaces ge-0/0/0.0


    正确答案： C
    解析： 暂无解析

  • 第9题：

    单选题
    Which command would you type to see a concise display of which interfaces are up and which are down?（）
    A

    show interfaces brief

    B

    show interfaces status

    C

    show ip interface brief

    D

    show interfaces terse


    正确答案： D
    解析： 暂无解析

  • 第10题：

    单选题
    You want to implement a high availability network using two Cisco routers. You also want to  ensure that the stat of the WAN interfaces can be tracked in doing so.  Which router redundancy  protocol cannot be configured for interface tracking？ （）
    A

     GLBP

    B

     HSRP

    C

     RPR

    D

     VRRP

    E

     SLB

    F

     RPR+

    G

     None of the other alternatives apply


    正确答案： C
    解析： 暂无解析

  • 第11题：

    多选题
    Which two steps are performed when configuring a zone？（）
    A

    Define a default policy for the zone.

    B

    Assign logical interfaces to the zone.

    C

    Assign physical interfaces to the zone.

    D

    Define the zone as a security or functional zone


    正确答案： D,B
    解析： 暂无解析

  • 第12题：

    单选题
    When devices are in cluster mode， which new interfaces are created？（）
    A

    No new interface is created.

    B

    Only the st interface is created.

    C

    fxp1， fab0， and fab1 are created.

    D

    st，fxp1，reth，fab0，and fab1 are created.


    正确答案： C
    解析： 暂无解析

  • 第13题：

    You wish to increase the security of all of the routers within your network. What can be done to secure the virtual terminal interfaces on a router?（）

    • A、Administratively shut down the interface.
    • B、Physically secure the interface.
    • C、Create an access list and apply it to the virtual terminal interfaces with the access-group command.
    • D、Configure a virtual terminal password and login process.
    • E、Enter an access list and apply it to the virtual terminal interfaces using the access-class command.

    正确答案:D,E

  • 第14题：

    When devices are in cluster mode， which new interfaces are created？（）

    • A、No new interface is created.
    • B、Only the st interface is created.
    • C、fxp1， fab0， and fab1 are created.
    • D、st，fxp1，reth，fab0，and fab1 are created.

    正确答案:C

  • 第15题：

    Which command would you use to view interface usage details in real time?（）

    • A、show interfaces terse
    • B、show interfaces extensive
    • C、monitor interface traffic
    • D、monitor traffic interface

    正确答案:C

  • 第16题：

    Which two statements are correct regarding units in JUNOS?（）

    • A、Units in JUNOS are always required for any interface configured with logical addresses such as IP and IPv6.
    • B、Units in JUNOS are only required when you are configuring sub-interfaces for inter-VLAN routing.
    • C、Unit numbers must match the DLCI or VCI numbers configured on the interface.
    • D、Unit 0 is the only value allowed on interfaces running HDLC, PPP, or for Ethernet interfaces not doing VLAN-tagging.

    正确答案:A,D

  • 第17题：

    You want to create an out-of-band management zone and assign the ge-0/0/0.0 interface to that zone.From the [edit] hierarchy, which command do you use to configure this assignment?（）

    • A、set security zones management interfaces ge-0/0/0.0
    • B、set zones functional-zone management interfaces ge-0/0/0.0
    • C、set security zones functional-zone management interfaces ge-0/0/0.0
    • D、set security zones functional-zone out-of-band interfaces ge-0/0/0.0

    正确答案:C

  • 第18题：

    Which command would you type to see a concise display of which interfaces are up and which are down?（）

    • A、show interfaces brief
    • B、show interfaces status
    • C、show ip interface brief
    • D、show interfaces terse

    正确答案:D

  • 第19题：

    多选题
    Which two statements are true about hierarchical architecture? （）(Choose two.)
    A

    You can assign a logical interface to multiple zones.

    B

    You cannot assign a logical interface to multiple zones.

    C

    You can assign a logical interface to multiple routing instances.

    D

    You cannot assign a logical interface to multiple routing instances.


    正确答案： B,C
    解析： 暂无解析

  • 第20题：

    单选题
    Which command would you use to view interface usage details in real time?（）
    A

    show interfaces terse

    B

    show interfaces extensive

    C

    monitor interface traffic

    D

    monitor traffic interface


    正确答案： D
    解析： 暂无解析

  • 第21题：

    单选题
    Which operational command would you use to quickly verify the state of all interfaces?（）
    A

    show interfaces terse

    B

    show interfaces

    C

    show configuration interfaces

    D

    show interface status


    正确答案： B
    解析： 暂无解析

  • 第22题：

    单选题
    Regarding zone types， which statement is true？（）
    A

    You cannot assign an interface to a functional zone.

    B

    You can specifiy a functional zone in a security policy.

    C

    Security zones must have a scheduler applied.

    D

    You can use a security zone for traffic destined for the device itself.


    正确答案： D
    解析： 暂无解析

  • 第23题：

    单选题
    Which statement is true about the SDM QoS wizard and its ability to enable a QoS policy on router interfaces？（）
    A

    QoS can be enabled on interfaces used for Easy VPN clients

    B

    QoS can be enabled on IPsec VPN interfaces and tunnels

    C

    QoS can be enabled on interfaces with an existing QoS policy

    D

    the QoS policy can be enabled for incoming and outgoing traffic on the interface


    正确答案： D
    解析： 暂无解析

相关内容