Checkpoint firewall
SRX Series device
DP sensor
MX Series device
第1题：
You have a firewall enforcer receiving resource access policies from a Junos Pulse Access Control Service. You are using Network and Security Manager (NSM) for configuration management on that firewall. The firewall can also be configured using its built-in command-line interface (CLI) or Web-based user interface (WebUI).To avoid conflicting configurations, which two interfaces must you use to configure the firewall enforcer?（）
A. CLI
B. WebUI
C. NSM
D. Junos Pulse Access Control Service
第2题：
A. Multiple Infranet Enforcer instances are created with a single serial number of an SRX Series device defined in each configuration.
B. A single Infranet Enforcer instance is created with both serial numbers of the clustered SRX Series devices defined in the configuration.
C. Multiple Infranet Enforcer instances are created with a single IP address of an SRX Series device defined in each configuration.
D. A single Infranet enforcer instance is created with the VIP of the clustered SRX Series device defined in the configuration.
第3题：
A. to specify the destination addresses to which access is permitted
B. to specify the source address permitted to access the resource
C. to specify the services to which access is permitted
D. to inform the enforcer to expect policy information from the Junos Pulse Access Control Service
第4题：
You are installing a MAG Series device for access control using an SRX Series device as the firewall enforcer. The MAG Series device resides in the same security zone as users. However, the users reside in different subnets and use the SRX Series device as an IP gateway.Which statement is true?（）
第5题：
Which two Junos platforms provide stateful firewall functionality?（）
第6题：
You have multiple realms configured on a MAG Series device. A user is authenticating with a non- Junos Pulse Access Control Service client. The username does not contain a realm suffix.Which behavior will the user experience?（）
A. The user will not be able to log-in, as the Junos Pulse Access Control Service device cannot map the user to a realm when the realm value is empty.
B. The user will be mapped to all realms available to the user.
C. The Junos Pulse Access Control Service device displays a page where the user must choose from a list of realms.
D. The endpoint is assigned to the first realm in the list whose authentication server is a match with the endpoints software.
第7题：
A. Checkpoint firewall
B. SRX Series device
C. DP sensor
D. MX Series device
第8题：
A.The SRX Series device has been configured correctly, the Junos Pulse Access Control Service is reachable on the network, and the SRX Series device is waiting to receive the initial connection from the Junos Pulse Access Control Service.
B.The SRX Series device has confirmed that the Junos Pulse Access Control Service is configured and is reachable on the network, the SRX Series device is waiting to receive the connection from the Junos Pulse Access Control Service, and all that remains to be accomplished is to configure the SRX Series device.
C.The SRX Series device is configured correctly and connected to the Junos Pulse Access Control Service. All that remains to be done to complete the configuration is to configure the SRX Series device on the Junos Pulse Access Control Service.
D.Both the Junos Pulse Access Control Service and the SRX Series device are configured correctly and communicating with each other.
第9题：
What is a type of firewall enforcer supported by the Junos Pulse Access Control Service?（）
第10题：
In a Junos Pulse Access Control Service firewall enforcement configuration, what is the purpose of the source IP policy?（）