单选题Regarding zone types， which statement is true？（）A You cannot assign an interface to a functional zone.B You can specifiy a functional zone in a security policy.C Security zones must have a scheduler applied.D You can use a security zone for traffic des

题目

单选题

Regarding zone types， which statement is true？（）

You cannot assign an interface to a functional zone.

You can specifiy a functional zone in a security policy.

Security zones must have a scheduler applied.

You can use a security zone for traffic destined for the device itself.

如果没有搜索结果或未解决您的问题，请直接联系老师获取答案。

相似问题和答案

第1题：

Which two statements are true about hierarchical architecture? ()(Choose two.)

A. You can assign a logical interface to multiple zones.

B. You cannot assign a logical interface to multiple zones.

C. You can assign a logical interface to multiple routing instances.

D. You cannot assign a logical interface to multiple routing instances.

参考答案：B, D

第2题：

Which type of zone is used by traffic transiting the device？（）

A、transit zone
B、default zone
C、security zone
D、functional zone

正确答案:C

第3题：

You want to create an out－of－band management zone and assign the ge－0／0／0.0 interface to that zone.From the [edit] hierarchy, which command do you use to configure this assignment?()

A. set security zones management interfaces ge-0/0/0.0

B. set zones functional-zone management interfaces ge-0/0/0.0

C. set security zones functional-zone management interfaces ge-0/0/0.0

D. set security zones functional-zone out-of-band interfaces ge-0/0/0.0

参考答案：C

第4题：

You are installing a MAG Series device for access control using an SRX Series device as the firewall enforcer. The MAG Series device resides in the same security zone as users. However, the users reside in different subnets and use the SRX Series device as an IP gateway.Which statement is true?（）

A、You must configure a security policy on the SRX Series device to allow traffic to flow from the user devices to the MAG Series device.
B、No security policy is necessary on the SRX Series device to allow traffic to flow from the user devices to the MAG Series device.
C、You must configure host-inbound traffic on the SRX Series device to allow SSL traffic between the MAG Series device and the user devices.
D、You must configure host-inbound traffic on the SRX Series device to allow EAP traffic between the MAG Series device and the user devices.

正确答案:A

第5题：

Which two actions can be configured to allow traffic to traverse an interface when zone-based security isbeing employed？（）

A、Pass
B、Flow
C、Allow
D、Inspect

正确答案:A,D

第6题：

You want to allow your device to establish OSPF adjacencies with a neighboring device connected to interface ge-0/0/3.0. Interface ge-0/0/3.0 is a member of the HR zone.Under which configuration hierarchy must you permit OSPF traffic?（）

A. [edit security policies from-zone HR to-zone HR]

B. [edit security zones functional-zone management protocols]

C. [edit security zones protocol-zone HR host-inbound-traffic]

D. [edit security zones security-zone HR host-inbound-traffic protocols]

参考答案：D

第7题：

A、[edit security policies from-zone HR to-zone HR]
B、[edit security zones functional-zone management protocols]
C、[edit security zones protocol-zone HR host-inbound-traffic]
D、[edit security zones security-zone HR host-inbound-traffic protocols]

正确答案:D

第8题：

At which two levels of the Junos CLI hierarchy is the host－inbound－traffic command configured? ()(Choose two.)

A. [edit security idp]

B. [edit security zones security-zone trust interfaces ge-0/0/0.0]

C. [edit security zones security-zone trust]

D. [edit security screen]

参考答案：B, C

第9题：

You want to allow your device to establish OSPF adjacencies with a neighboring device connected tointerface ge-0/0/3.0. Interface ge-0/0/3.0 is a member of the HR zone.Under which configuration hierarchy must you permit OSPF traffic？（）

A、[edit security policies from-zone HR to-zone HR]
B、[edit security zones functional-zone management protocols]
C、[edit security zones protocol-zone HR host-inbound-traffic]
D、[edit security zones security-zone HR host-inbound-traffic protocols]

正确答案:D

第10题：

In the Junos OS, which statement is true?（）

A、vlan.0 belongs to the untrust zone.
B、You must configure Web authentication to allow inbound traffic in the untrust zone.
C、The zone name "untrust" has no special meaning.
D、The untrust zone is not configurable.

正确答案:C

单选题Regarding zone types， which statement is true？（）A You cannot assign an interface to a functional zone.B You can specifiy a functional zone in a security policy.C Security zones must have a scheduler applied.D You can use a security zone for traffic des

题目

相似问题和答案

更多相关问题

相关内容