When an SRX series device receives an ESP packet, what happe

题目
单选题
When an SRX series device receives an ESP packet, what happens?()
A

If the destination address of the outer IP header of the ESP packet matches the IP address of the ingress interface, it will

B

If the destination IP address in the outer IP header of ESP does not match the IP address of the ingress interface, it will

C

If the destination address of the outer IP header of the ESP packet matches the IP address of the ingress interface, based packet.

D

If the destination address of the outer IP header of the ESP packet matches the IP address of the ingress interface, based of inner header, it will decrypt the packet.

如果没有搜索结果或未解决您的问题,请直接 联系老师 获取答案。
相似问题和答案

第1题:

Which statement is true regarding the Junos OS for security platforms?()

A. SRX Series devices can store sessions in a session table.

B. SRX Series devices accept all traffic by default.

C. SRX Series devices must operate only in packet-based mode.

D. SRX Series devices must operate only in flow-based mode.


参考答案:A

第2题:

What is the first CoS process performed when a packet enters a JUNOS device?()

A.Rewrite Marker

B.Multifield Classifier

C.Policing

D.BA Classifier


参考答案:D

第3题:

When configuring a single SRX210 as a firewall enforcer to a MAG4610 active/passive cluster, which statement supports a fault-tolerant configuration?()

A. The cluster VIP is defined on the MAG4610 cluster, and the VIP of the cluster is defined as an instance on the SRX Series device.

B. The cluster VIP is not defined on the MAG4610 cluster, and the IP address of both the active and passive nodes of the cluster are defined as separate instances on the SRX Series device.

C. The cluster VIP is defined on the MAG4610 cluster, and the IP address of the active node is defined as an instance on the SRX Series device.

D. The cluster VIP is not defined on the MAG4610 cluster, and the IP address of the passive node is defined as an instance on the SRX Series device.


参考答案:A

第4题:

Which three components can be leveraged when defining a local whitelist or blacklist for antispam on a branch SRX Series device? (Choose three.)()

  • A、spam assassin filtering score
  • B、sender country
  • C、sender IP address
  • D、sender domain
  • E、sender e-mail address

正确答案:C,D,E

第5题:

You are configuring an active/passive cluster of SRX Series devices as the firewall enforcer on a MAG Series device.Which statement is true?()

  • A、Multiple Infranet Enforcer instances are created with a single serial number of an SRX Series device defined in each configuration.
  • B、A single Infranet Enforcer instance is created with both serial numbers of the clustered SRX Series devices defined in the configuration.
  • C、Multiple Infranet Enforcer instances are created with a single IP address of an SRX Series device defined in each configuration.
  • D、A single Infranet enforcer instance is created with the VIP of the clustered SRX Series device defined in the configuration.

正确答案:B

第6题:

What is a type of firewall enforcer supported by the Junos Pulse Access Control Service?()

A. Checkpoint firewall

B. SRX Series device

C. DP sensor

D. MX Series device


参考答案:A

第7题:

What is a type of firewall enforcer supported by the Junos Pulse Access Control Service?()

  • A、Checkpoint firewall
  • B、SRX Series device
  • C、DP sensor
  • D、MX Series device

正确答案:A

第8题:

The SRX device receives a packet and determines that it does not match an existing session.After SCREEN options are evaluated, what is evaluated next?()

A. source NAT

B. destination NAT

C. route lookup

D. zone lookup


参考答案:B

第9题:

What are two rulebase types within an IPS policy on an SRX Series device?() (Choose two.)

  • A、rulebase-ips
  • B、rulebase-ignore
  • C、rulebase-idp
  • D、rulebase-exempt

正确答案:A,D

第10题:

Which two statements are true about the Websense redirect Web filter solution? ()(Choose two.)

  • A、The Websense redirect Web filter solution does not require a license on the SRX device.
  • B、The Websense server provides the SRX device with a category for the URL and the SRX device then matches the category decides to permit or deny the URL.
  • C、The Websense server provides the SRX device with a decision as to whether the SRX device permits or denies the URL.
  • D、When the Websense server does not know the category of the URL, it sends a request back to the SRX device SurfControl server in the cloud.

正确答案:A,C

更多相关问题