多选题Which three JUNOS software features allow for increased security on your network？（）Afirewall filtersBdata encryptionCrouting protocol authenticationDsupport for BGP path mtu discoveryEautomatic discovery for IPSEC neighbors

第1题：

第2题：

IPSec VPN is a widely-acknowledged solution for enterprise network. Which three IPsec VPNstatements are true？（）

• A、IKE keepalives are unidirectional and sent every ten seconds
• B、IPsec uses the Encapsulating Security Protocol （ESP） or the Authentication Header （AH）protocol for exchanging keys
• C、To establish IKE SA, main mode utilizes six packets while aggressive mode utilizes only threepackets
• D、IKE uses the Diffie-Hellman algorithm to generate symmetrical keys to be used by IPsec peers

第3题：

第4题：

Which IOS features are used to avoid Routing loops when dynamic Routing protocols are used betweenPE and CE in MPLS-VPN networks？（）

• A、Site Of Origin SOO.
• B、SHAM links with OSPF
• C、BGP cost community
• D、BGP feature allow-as in
• E、RPF Reverse Path forwarding.
• F、Access-list Control in Distance Vector protocol like RIP and EIGRP.

第5题：

Your IT director has decided to allow employees to use their laptops at home as well as in the office. You have deployed the Junos Pulse client to allow access to the offices 802.1X-enabled wired network. Your company also has the Junos Pulse Secure Access Service deployed. You want the Junos Pulse client to automatically launch the appropriate access method depending on each users location. Which three are supported to determine the users location?（）

• A、MAC address
• B、DNS server
• C、DHCP server
• D、resolve address
• E、endpoint address

第6题：

Which three functions are provided by JUNOS Software for security platforms？（）

• A、VPN establishment
• B、stateful ARP lookups
• C、Dynamic ARP inspection
• D、Network Address Translation
• E、inspection of packets at higher levels （Layer 4 and above）

第7题：

Which three statements are true regarding IDP？（）

• A、IDP cannot be used in conjunction with other JUNOS Software security features such as SCREEN options，zones， and security policy.
• B、IDP inspects traffic up to the Application layer.
• C、IDP searches the data stream for specific attack patterns.
• D、IDP inspects traffic up to the Presentation layer.
• E、IDP can drop packets， close sessions， prevent future sessions， and log attacks for review by network administrators when an attack is detected.

第8题：

第9题：

Which IOS user EXEC command will allow a network technician to determine which router in the path to an unreachable network host should be examined more closely for the cause of the network failure?（）

• A、TestKingB> telnet
• B、TestKingB > ping
• C、TestKingB > trace
• D、TestKingB > show ip route
• E、TestKingB > show interface
• F、TestKingB > show cdp neighbors

第10题：

Which of the following tools would allow an administrator to push out a software update to allswitches on the network?（）

• A、Network management
• B、Protocol analyzer
• C、Network monitoring
• D、System diagnostic