Using a policy with the policy－rematch flag enabled, what happens to the existing and new sessions when you change the policy action from permit to deny?()A. The new sessions matching the policy are denied. The existing sessions are dropped.B. The new ses

题目
Using a policy with the policy－rematch flag enabled, what happens to the existing and new sessions when you change the policy action from permit to deny?()

A. The new sessions matching the policy are denied. The existing sessions are dropped.

B. The new sessions matching the policy are denied. The existingsessions, not being allowed tocarry any traffic, simply timeout.

C. The new sessions matching the policy might be allowed through if they match another policy. The existing sessions are dropped.

D. The new sessions matching the policy are denied. The existing sessions continue until they are completed or their time.

相似考题

1.Intheconfigurationshownintheexhibit，youdecidedtoeliminatethejunos-ftpapplicationfromthematchconditionofthepolicyMyTraffic.[editsecuritypolicies]user@hostlshowfrom-zonePrivateto-zoneExternal{policyMyTraffic{match{source-addressmyHosts；destination-addressExtServers；application[junos-ftpjunos-bgp]；}then{permit{tunnel{ipsec-vpnvpnTunnel；}}}}}policy-rematch；WhatwillhappentotheexistingFTPandBGPsessions？（）A.TheexistingFTPandBGPsessionswillcontinue.B.TheexistingFTPandBGPsessionswillbere-evaluatedandonlyFTPsessionswillbedropped.C.TheexistingFTPandBGPsessionswillbere-evaluatedandallsessionswillbedropped.D.TheexistingFTPsessionswillcontinueandonlytheexistingBGPsessionswillbedropped.

2.A network administrator wants to permit Telnet traffic initiated from the address book entry the10net in a zone called UNTRUST to the address book entry Server in a zone called TRUST.However, the administrator does not want the server to be able to initiate any type of traffic from the TRUST zone to the UNTRUST zone.Which configuration statement would correctly accomplish this task?（）A. from-zone UNTRUST to-zone TRUST { policy DenyServer { match { source-address any; destination-address any; application any; } then { deny; } } } from-zone TRUST to-zone UNTRUST { policy AllowTelnetin { match { source-address the10net; destination-address Server; application junos-telnet; } then { permit; } } }B. from-zone TRUST to-zone UNTRUST { policy DenyServer { match { source-address Server; destination-address any; application any; } then {deny; } } } from-zone UNTRUST to-zone TRUST { policy AllowTelnetin { match { source-address the10net; destination-address Server; application junos-telnet; } then { permit; } } }C. from-zone UNTRUST to-zone TRUST { policy AllowTelnetin { match { source-address the10net; destination-address Server; application junos-ftp; } then { permit; } } }D. from-zone TRUST to-zone UNTRUST { policy DenyServer { match { source-address Server; destination-address any; application any; } then { permit; } } } from-zone UNTRUST to-zone TRUST { policy AllowTelnetin { match {source-address the10net; destination-address Server; application junos-telnet; } then { permit; } } }

3.Which configuration keyword ensures that all in－progress sessions are re－evaluated upon committing a security policy change?()A. policy-rematchB. policy-evaluateC. rematch-policyD. evaluate-policy

4.Intheexhibit，youdecidedtochangemyHostsaddresses.[editsecuritypolicies]user@hostshowfrom-zonePrivateto-zoneExternal{policyMyTraffic{match{source-addressmyHosts；destination-addressExtServers；application[junos-ftpjunos-bgp]；}then{permit{tunnel{ipsec-vpnvpnTunnel；}}}}}policy-rematch；Whatwillhappentothenewsessionsmatchingthepolicyandin-progresssessionsthathadalreadymatchedthepolicy？（）A.Newsessionswillbeevaluated.In-progresssessionswillbere-evaluated.B.Newsessionswillbeevaluated.Allin-progresssessionswillcontinue.C.Newsessionswillbeevaluated.Allin-progresssessionswillbedropped.D.Newsessionswillhaltuntilallin-progresssessionsarere-evaluated.In-progresssessionswillbere-evaluatedandpossiblydropped.

参考答案和解析
参考答案：A
更多“Using a policy with the policy－rematch flag enabled, what happens to the existing and new sessions when you change the policy action from permit to deny?() ”相关问题

  • 第1题：

    Whichactionoccurswhenthepolicymain-policyevaluatestheBGProute10.0.55.2/32？（）

    [editpolicy-options]

    policy-statementtest{

    from{

    route-filter10.0.0.016/orlongeraccept；

    route-filter10.0.67.0/24orlangerreject；

    route-filter10.0.0.0/8orlanger；

    }

    then{

    metric10；

    communityaddno-advertise；

    accept；

    }

    }

    policy-statementmain-policy{

    termonly-want-certain-routes{

    from{

    policytest；

    }

    then{

    communityaddharry-402；

    accept；

    }

    }

    }

    communitynoadvertisemembersno-advertise；

    communityharry-402members666：402；

    [editprotocols]

    bgp{

    exportmain-policy；}


    参考答案：B

  • 第2题：

    WhenconfiguringdualVIOserverstoconnecttoSANbaseddiskinfailovermode,whatsettingmustbeapplied?()

    A.algorithm=failover

    B.algorithm=round_robin

    C.reserve_policy=no_reserve

    D.reserve_policy=single_path


    参考答案：C

  • 第3题：

    下面是路由器Huawei的部分配置信息,关于该配置信息描述错误的是()system－view[HUAWEI]ip as－path－filter 2 permit_200_300[HUAWEI]route－policy test permit node 10[Huawei－route－policy]if－match as－path－filter 2

    A.设置序列号为2的AS路径过滤器，允许路由信息中包含AS200和AS300

    B.定义一个名为test的Route-Policy，该节点序列好为10

    C.该Route-Policy的10号节点引用AS路径过滤器为2，并定义了一个if-match子句

    D.该Route-Policy只能在OSPF进程中进行调用


    参考答案：D

  • 第4题：

    ABGProuterhasthefollowingconfiguration：

    protocols{

    bgp{

    export[policy-1policy-2policy-3]；

    }}

    policy-options{

    policy-statementpolicy-2{

    termget-statics{

    fromprotocolstatic；

    thenaccept；

    }

    termreject-all{

    thenreject；

    }

    }

    policy-statementpolicy-1{

    termget-aggregate{

    fromprotocolaggregate；

    thenaccept；

    }

    termreject-all{

    thenreject；

    }

    }

    policy-statementpolicy-3{

    termget-ospf{

    fromprotocolospf；

    thenaccept；

    }

    termreject-all{

    thenreject；

    }

    }

    }

    Whichpolicytermisevaluatedfirstwhenexportingroutes？（）


    参考答案：D

  • 第5题：

    ASA／PIXversion7.0introducedModularPolicyFramework(MPF)asanextensiblewaytoclassifytraffic,andthenapplypolicies(oractions)tothattraffic.MPFataminimum requireswhichthreecommands?()

    A.http-map，tcp-map，class-map

    B.class-map，tcp-map，policy-map

    C.class-map，policy-map，service-map

    D.class-map，service-policy，policy-map


    参考答案：D

  • 第6题：

    3、Q-learning属于哪种算法

    A．On-policy算法

    B．Off-policy 算法

    C．Model-based 算法

    D．Value-based 算法


    B

相关内容