单选题Which zone is a system-defined zone？（）A null zoneB trust zoneC untrust zoneD management zone

题目
单选题
Which zone is a system-defined zone？（）
A

null zone

B

trust zone

C

untrust zone

D

management zone

相似考题

1.Which two statements are true regarding the system－default security policy [edit security policies default－policy]?()(Choose two.)A. Traffic is permitted from the trust zone to the untrust zone.B. Intrazone traffic in the trust zone is permitted.C. All traffic through the device is denied.D. The policy is matched only when no other matching policies are found.

2.A network administrator wants to permit Telnet traffic initiated from the address book entry the10net in a zone called UNTRUST to the address book entry Server in a zone called TRUST.However, the administrator does not want the server to be able to initiate any type of traffic from the TRUST zone to the UNTRUST zone.Which configuration statement would correctly accomplish this task?（）A. from-zone UNTRUST to-zone TRUST { policy DenyServer { match { source-address any; destination-address any; application any; } then { deny; } } } from-zone TRUST to-zone UNTRUST { policy AllowTelnetin { match { source-address the10net; destination-address Server; application junos-telnet; } then { permit; } } }B. from-zone TRUST to-zone UNTRUST { policy DenyServer { match { source-address Server; destination-address any; application any; } then {deny; } } } from-zone UNTRUST to-zone TRUST { policy AllowTelnetin { match { source-address the10net; destination-address Server; application junos-telnet; } then { permit; } } }C. from-zone UNTRUST to-zone TRUST { policy AllowTelnetin { match { source-address the10net; destination-address Server; application junos-ftp; } then { permit; } } }D. from-zone TRUST to-zone UNTRUST { policy DenyServer { match { source-address Server; destination-address any; application any; } then { permit; } } } from-zone UNTRUST to-zone TRUST { policy AllowTelnetin { match {source-address the10net; destination-address Server; application junos-telnet; } then { permit; } } }

3.Which zone is system－defined?()A.securityB.functionalC.junos-globalD.management

4.In the Junos OS, which statement is true?()A. vlan.0 belongs to the untrust zone.B. You must configure Web authentication to allow inbound traffic in the untrust zone.C. The zone name "untrust" has no special meaning.D. The untrust zone is not configurable.

参考答案和解析
正确答案： C
解析： 暂无解析
更多“单选题Which zone is a system-defined zone？（）A null zoneB trust zoneC untrust zoneD management zone”相关问题

  • 第1题：

    Users can define policy to control traffic flow between which two components? ()(Choose two.)

    A. from a zone to the router itself

    B. from a zone to the same zone

    C. from a zone to a different zone

    D. from one interface to another interface


    参考答案：B, C

  • 第2题：

    If the radio signal ground wave extends out for less distance than the minimum skywave distance，there is an area in which no signal is received．This is called the ______．

    A.Skip zone

    B.Blackout zone

    C.Diffraction zone

    D.Shadow zone


    正确答案：A

  • 第3题：

    A network administrator wants to permit Telnet traffic initiated from the address book entry the10net in a zone called UNTRUST to the address book entry Server in a zone called TRUST. However, the administrator does not want the server to be able to initiate any type of traffic from the TRUST zone to the UNTRUST zone. Which configuration statement would correctly accomplish this task?（）

    • A、from-zone UNTRUST to-zone TRUST { policy DenyServer { match { source-address any; destination-address any; application any; } then { deny; } } } from-zone TRUST to-zone UNTRUST { policy AllowTelnetin { match { source-address the10net; destination-address Server; application junos-telnet; } then { permit; } } }
    • B、from-zone TRUST to-zone UNTRUST { policy DenyServer { match { source-address Server; destination-address any; application any; } then {deny; } } } from-zone UNTRUST to-zone TRUST { policy AllowTelnetin { match { source-address the10net; destination-address Server; application junos-telnet; } then { permit; } } }
    • C、from-zone UNTRUST to-zone TRUST { policy AllowTelnetin { match { source-address the10net; destination-address Server; application junos-ftp; } then { permit; } } }
    • D、from-zone TRUST to-zone UNTRUST { policy DenyServer { match { source-address Server; destination-address any; application any; } then { permit; } } } from-zone UNTRUST to-zone TRUST { policy AllowTelnetin { match {source-address the10net; destination-address Server; application junos-telnet; } then { permit; } } }

    正确答案:B

  • 第4题：

    在Atoll中，下面哪个zone区域下允许存在多个polygon？（）

    • A、Focus Zone
    • B、Hotspot Zone
    • C、Printing Zone
    • D、Filtering Zone

    正确答案:B

  • 第5题：

    在Atoll中，哪种zone完全不会影响覆盖图的统计结果？（）

    • A、Focus Zone
    • B、Computation Zone
    • C、Printing Zone
    • D、Filtering Zone

    正确答案:C

  • 第6题：

    In the Junos OS, which statement is true?（）

    • A、vlan.0 belongs to the untrust zone.
    • B、You must configure Web authentication to allow inbound traffic in the untrust zone.
    • C、The zone name "untrust" has no special meaning.
    • D、The untrust zone is not configurable.

    正确答案:C

  • 第7题：

    Users can define policy to control traffic flow between which two components？（）

    • A、from a zone to the device itself
    • B、from a zone to the same zone
    • C、from a zone to a different zone
    • D、from one interface to another interface

    正确答案:B,C

  • 第8题：

    Which two statements are true regarding the system-default security policy [edit security policies default-policy]?（）(Choose two.)

    • A、Traffic is permitted from the trust zone to the untrust zone.
    • B、Intrazone traffic in the trust zone is permitted.
    • C、All traffic through the device is denied.
    • D、The policy is matched only when no other matching policies are found.

    正确答案:C,D

  • 第9题：

    The current time zone for one of the user sessions is set to the database local time zone. For one application， the user session requires the time zone to be set to the local operating system time zone without affecting other user sessions. Which two solutions could the user implement to achieve this objective？ （）

    • A、 use the ALTER SYSTEM command to change the time zone
    • B、 use the ALTER SESSION command to change the time zone
    • C、 use the ALTER DATABASE command to change the time zone
    • D、 set the value for the operating system variable ORA_SDTZ on the client machine
    • E、 set the value for the operating system variable ORA_SDTZ on the database server machine

    正确答案:B,D

  • 第10题：

    单选题
    You have configured a UTM profile called Block-Spam, which has the appropriate antispam configuration to block undesired spam e-mails.Which configuration would protect an SMTP server in the dmz zone from spam originating in the untrust zone?（）
    A

    set security policies from-zone dmz to-zone untrust policy anti-spam then permit application- services utm-policy Block-Spam

    B

    set security policies from-zone untrust to-zone dmz policy anti-spam then permit application- services utm-policy Block-Spam

    C

    set security policies from-zone untrust to-zone dmz policy anti-spam then permit application- services anti-spam-policy

    D

    set security policies from-zone untrust to-zone dmz policy anti-spam then permit application- services Block-Spam


    正确答案： B
    解析： 暂无解析

  • 第11题：

    单选题
    Click the Exhibit button. Based on the exhibit, client PC 192.168.10.10 cannot ping 1.1.1.2. Which is a potential cause for this problem?（）
    A

    The untrust zone does not have a management policy configured.

    B

    The trust zone does not have ping enabled as host-inbound-traffic service.

    C

    The security policy from the trust zone to the untrust zone does not permit ping.

    D

    No security policy exists for the ICMP reply packet from the untrust zone to the trust zone.


    正确答案： D
    解析： 暂无解析

  • 第12题：

    单选题
    In the Junos OS, which statement is true?（）
    A

    vlan.0 belongs to the untrust zone.

    B

    You must configure Web authentication to allow inbound traffic in the untrust zone.

    C

    The zone name untrust has no special meaning.

    D

    The untrust zone is not configurable.


    正确答案： A
    解析： 暂无解析

  • 第13题：

    Click the Exhibit button.Based on the exhibit, client PC 192.168.10.10 cannot ping 1.1.1.2.Which is a potential cause for this problem?()

    A. The untrust zone does not have a management policy configured.

    B. The trust zone does not have ping enabled as host-inbound-traffic service.

    C. The security policy from the trust zone to the untrust zone does not permit ping.

    D. No security policy exists for the ICMP reply packet from the untrust zone to the trust zone.


    参考答案：C

  • 第14题：

    Which type of zone is used by traffic transiting the device？（）

    • A、transit zone
    • B、default zone
    • C、security zone
    • D、functional zone

    正确答案:C

  • 第15题：

    Solaris缺省安装好后，整个系统被称作为（）。

    • A、大zone
    • B、全局zone
    • C、硬件zone
    • D、软件zone

    正确答案:B

  • 第16题：

    在Atoll仿真中，哪种zone完全不会影响覆盖图的统计结果？（）

    • A、Focus zone
    • B、Computation zone
    • C、Printing zone
    • D、Filtering zone

    正确答案:C

  • 第17题：

    使用Capesso前，在Atoll中必须提供的zone为（）。

    • A、Focus zone
    • B、Computation zone
    • C、Printing zone
    • D、Filtering zone

    正确答案:A

  • 第18题：

    Which zone is a system-defined zone？（）

    • A、null zone
    • B、trust zone
    • C、untrust zone
    • D、management zone

    正确答案:A

  • 第19题：

    Users can define policy to control traffic flow between which two components? （）(Choose two.)

    • A、from a zone to the router itself
    • B、from a zone to the same zone
    • C、from a zone to a different zone
    • D、from one interface to another interface

    正确答案:B,C

  • 第20题：

    You have configured a UTM profile called Block-Spam, which has the appropriate antispam configuration to block undesired spam e-mails.Which configuration would protect an SMTP server in the dmz zone from spam originating in the untrust zone?（）

    • A、set security policies from-zone dmz to-zone untrust policy anti-spam then permit application- services utm-policy Block-Spam
    • B、set security policies from-zone untrust to-zone dmz policy anti-spam then permit application- services utm-policy Block-Spam
    • C、set security policies from-zone untrust to-zone dmz policy anti-spam then permit application- services anti-spam-policy
    • D、set security policies from-zone untrust to-zone dmz policy anti-spam then permit application- services Block-Spam

    正确答案:B

  • 第21题：

    Your company has a main office and two branch offices that are connected by WAN links. The main office runs the DNS service on three domain controllers. The zone for your domain is configured as an Active Directory-integrated zone. Each branch office has a single member server that hosts a secondary zone for the domain. The DNS servers in the branch offices use the main office DNS server as the DNS Master server for the zone. You need to minimize DNS zone transfer traffic over the WAN links. What should you do？（）

    • A、Decrease the Retry Interval setting in the Start of Authority （SOA） record for the zone
    • B、Decrease the Refresh Interval setting in the Start of Authority （SOA） record for the zone
    • C、Increase the Refresh Interval setting in the Start of Authority （SOA） record for the zone
    • D、Disable the netmask ordering option in the properties of the DNS master server for the zone.

    正确答案:C

  • 第22题：

    单选题
    A network administrator wants to permit Telnet traffic initiated from the address book entry the10net in a zone called UNTRUST to the address book entry Server in a zone called TRUST. However, the administrator does not want the server to be able to initiate any type of traffic from the TRUST zone to the UNTRUST zone. Which configuration statement would correctly accomplish this task?（）
    A

    from-zone UNTRUST to-zone TRUST { policy DenyServer { match { source-address any; destination-address any; application any; } then { deny; } } } from-zone TRUST to-zone UNTRUST { policy AllowTelnetin { match { source-address the10net; destination-address Server; application junos-telnet; } then { permit; } } }

    B

    from-zone TRUST to-zone UNTRUST { policy DenyServer { match { source-address Server; destination-address any; application any; } then {deny; } } } from-zone UNTRUST to-zone TRUST { policy AllowTelnetin { match { source-address the10net; destination-address Server; application junos-telnet; } then { permit; } } }

    C

    from-zone UNTRUST to-zone TRUST { policy AllowTelnetin { match { source-address the10net; destination-address Server; application junos-ftp; } then { permit; } } }

    D

    from-zone TRUST to-zone UNTRUST { policy DenyServer { match { source-address Server; destination-address any; application any; } then { permit; } } } from-zone UNTRUST to-zone TRUST { policy AllowTelnetin { match {source-address the10net; destination-address Server; application junos-telnet; } then { permit; } } }


    正确答案： C
    解析： 暂无解析

  • 第23题：

    单选题
    Which zone is system-defined?（）
    A

    security

    B

    functional

    C

    junos-global

    D

    management


    正确答案： A
    解析： 暂无解析

  • 第24题：

    单选题
    Which zone is a system-defined zone？（）
    A

    null zone

    B

    trust zone

    C

    untrust zone

    D

    management zone


    正确答案： D
    解析： 暂无解析

相关内容