对于防火墙的默认安全*区Trust和Untrust的说法，正确的有：（）

A network administrator wants to permit Telnet traffic initiated from the address book entry the10net in a zone called UNTRUST to the address book entry Server in a zone called TRUST.However, the administrator does not want the server to be able to initiate any type of traffic from the TRUST zone to the UNTRUST zone.Which configuration statement would correctly accomplish this task?（）

A. from-zone UNTRUST to-zone TRUST { policy DenyServer { match { source-address any; destination-address any; application any; } then { deny; } } } from-zone TRUST to-zone UNTRUST { policy AllowTelnetin { match { source-address the10net; destination-address Server; application junos-telnet; } then { permit; } } }

B. from-zone TRUST to-zone UNTRUST { policy DenyServer { match { source-address Server; destination-address any; application any; } then {deny; } } } from-zone UNTRUST to-zone TRUST { policy AllowTelnetin { match { source-address the10net; destination-address Server; application junos-telnet; } then { permit; } } }

C. from-zone UNTRUST to-zone TRUST { policy AllowTelnetin { match { source-address the10net; destination-address Server; application junos-ftp; } then { permit; } } }

D. from-zone TRUST to-zone UNTRUST { policy DenyServer { match { source-address Server; destination-address any; application any; } then { permit; } } } from-zone UNTRUST to-zone TRUST { policy AllowTelnetin { match {source-address the10net; destination-address Server; application junos-telnet; } then { permit; } } }

A.100

B.85

C.50

D.5

A.Trust → untrust

B.Untrust→trust

C.Untrust→dmz

D.trust→local

A.Local域

B.DMZ域

C.Trust域

D.Untrust域

A.Local区域默认可以访问其他区域

B.Trust区域默认可以访问DMZ区域

C.Untrust区域默认不能访问Trust区域

D.防火墙的区域默认都不能互相访问

A.Local域

B.DMZ域

C.Trust域

D.Untrust域

A、安全组默认允许从虚拟机内部向外部的流量访问

B、防火墙的默认策略是禁止所有流量流入、流出

C、安全组默认允许从虚拟机外部向内部的流量访问

D、防火墙的默认策略是禁止部分流量流入、流出