违法和不良信息举报 联系客服
免费注册 登录

At which two levels of the Junos CLI hierarchy is the host-inbound-traffic command configured? （）(Choose two.)A、[edit security idp]B、[edit security zones security-zone trust interfaces ge-0/0/0.0]C、[edit security zones security-zone trust]D、[edit security

题目

At which two levels of the Junos CLI hierarchy is the host-inbound-traffic command configured? （）(Choose two.)

  • A、[edit security idp]
  • B、[edit security zones security-zone trust interfaces ge-0/0/0.0]
  • C、[edit security zones security-zone trust]
  • D、[edit security screen]
参考答案和解析
正确答案:B,C
如果没有搜索结果或未解决您的问题，请直接 联系老师 获取答案。
相似问题和答案

第1题：

You want to create an out－of－band management zone and assign the ge－0／0／0.0 interface to that zone.From the [edit] hierarchy, which command do you use to configure this assignment?()

A. set security zones management interfaces ge-0/0/0.0

B. set zones functional-zone management interfaces ge-0/0/0.0

C. set security zones functional-zone management interfaces ge-0/0/0.0

D. set security zones functional-zone out-of-band interfaces ge-0/0/0.0


参考答案：C

第2题：

At which two levels of the Junos CLI hierarchy is the host－inbound－traffic command configured? ()(Choose two.)

A. [edit security idp]

B. [edit security zones security-zone trust interfaces ge-0/0/0.0]

C. [edit security zones security-zone trust]

D. [edit security screen]


参考答案：B, C

第3题：

You want to test a configured screen value prior to deploying.Which statement will allow you to accomplish this?()

A. [edit security screen] user@host# show ids-option untrust-screen { alarm-test-only; }

B. [edit security screen] user@host# show ids-option untrust-screen { alarm-without-drop; }

C. [edit security screen] user@host# show ids-option untrust-screen { alarm-no-drop; }

D. [edit security screen] user@host# show ids-option untrust-screen { test-without-drop; }


参考答案：B

第4题：

You want to test a configured screen value prior to deploying.Which statement will allow you to accomplish this?（）

  • A、[edit security screen] user@host# show ids-option untrust-screen { alarm-test-only; }
  • B、[edit security screen] user@host# show ids-option untrust-screen { alarm-without-drop; }
  • C、[edit security screen] user@host# show ids-option untrust-screen { alarm-no-drop; }
  • D、[edit security screen] user@host# show ids-option untrust-screen { test-without-drop; }

正确答案:B

第5题：

You want to allow your device to establish OSPF adjacencies with a neighboring device connected to interface ge-0/0/3.0. Interface ge-0/0/3.0 is a member of the HR zone.Under which configuration hierarchy must you permit OSPF traffic?（）

A. [edit security policies from-zone HR to-zone HR]

B. [edit security zones functional-zone management protocols]

C. [edit security zones protocol-zone HR host-inbound-traffic]

D. [edit security zones security-zone HR host-inbound-traffic protocols]


参考答案：D

第6题：

You are required to configure a SCREEN option that enables IP source route option detection.Which twoconfigurations meet this requirement?() (Choose two.)

A. [edit security screen] user@host# show ids-option protectFromFlood { ip { loose-source-route-option; strict-source-route-option; } }

B. [edit security screen] user@host# show ids-option protectFromFlood { ip { source-route-option; } }

C. [edit security screen] user@host# show ids-option protectFromFlood { ip { record-route-option; security-option; } }

D. [edit security screen] user@host# show ids-option protectFromFlood { ip { strict-source-route-option; record-route-option; } }


参考答案：A, B

第7题：

Under which Junos hierarchy level are security policies configured?()

A. [edit security]

B. [edit protocols]

C. [edit firewall]

D. [edit policy-options]


参考答案：A

第8题：

Which two statements are true regarding the system－default security policy [edit security policies default－policy]?()(Choose two.)

A. Traffic is permitted from the trust zone to the untrust zone.

B. Intrazone traffic in the trust zone is permitted.

C. All traffic through the device is denied.

D. The policy is matched only when no other matching policies are found.


参考答案：C, D

第9题：

Auserwantstobepermanentlyaddedtothedbagroup.Whichofthefollowingcommandsorprocessescanbeusedtoaccomplishthis()

A.chgrp

B.chuser

C.edit/etc/user

D.edit/etc/security/group


参考答案：B

第10题：

A  user  wants  to  be  permanently  added  to  the  dba  group.  Which  of  the  following  commands  or processes can be used to accomplish this（）

  • A、chgrp
  • B、chuser
  • C、edit /etc/user
  • D、edit /etc/security/group

正确答案:B

更多相关问题
相关内容