单选题You have a MAG Series device with IP address 10.0.1.5 and hostname ad .pulse.local acting as an IF-MAP Federation server. The subject name of the device certificate on this server is ad .pulse.local.Which server URL must you configure on the IF-MAP cli

第1题：

第2题：

You are the administrator of a Windows 2000 network. You install Windows 2000 Professional on a new computer and configure the TCP/IP settings to have a static IP address. While testing network connectivity from the new computer, you discover an error in the DNS server address that is configured in the TCP/IP settings. You configure the correct DNS server address, which is 10.1.1.5. However, you are still unable to successfully connect to network resources by name. You run the IPconfig/all command. The results indicate that the DNS server address is now configured as 0.0.0.0 You need to ensure that the computer can connect to network resources by name. What should you do?（）

• A、Stop and restart the DNS Client service.
• B、Add 10.1.1.5 to the DNS server list on the TCP/IP Advanced Properties tab.
• C、Add an A （host） record for the computer to the DNS server’s zone file.
• D、Configure your DHCP server to have a DNS server address of 10.1.1.5.

第3题：

第4题：

You are performing the initial setup of a new MAG Series device and have installed a valid CA- signed certificate on the MAG Series device. Connectivity to an existing SRX Series firewall enforcer cannot be obtained.What are two explanations for this behavior?（）

• A、The MAG Series device has multiple ports associated with the certificate.
• B、The MAG Series device's serial number needs to be configured on the SRX Series device.
• C、The SRX Series device must have a certificate signed by the same authority as the MAG Series device.
• D、The MAG Series device and SRX Series device are not synchronized to an NTP server.

第5题：

You are an administrator of an active/passive cluster of MAG Series devices running in mixed- mode configuration (IF-MAP server and authenticating users). The active user count is quickly approaching the maximum limit of the cluster. You have been directed to reconfigure the cluster to an active/active cluster and add a new license to increase the total number of active users the cluster can support. What must you do before changing the cluster configuration?（）

• A、Apply the new license to the passive node of the cluster.
• B、Configure an external load balancer to hold the V IP.
• C、Disable the active node in the cluster.
• D、Remove the IF-MAP server configuration.

第6题：

Interface ge-0/0/2.0 of your device is attached to the Internet and is configured with an IP address and network mask of 71.33.252.17/24. A Web server with IP address 10.20.20.1 is running an HTTP service on TCP port 8080. The Web server is attached to the ge-0/0/0.0 interface of your device. You must use NAT to make the Web server reachable from the Internet using port translation. Which type of NAT must you configure?（）

• A、source NAT with address shifting
• B、pool-based source NAT
• C、static destination NAT
• D、pool-based destination NAT

第7题：

You are installing a MAG Series device for access control using an SRX Series device as the firewall enforcer. The MAG Series device resides in the same security zone as users. However, the users reside in different subnets and use the SRX Series device as an IP gateway.Which statement is true?（）

• A、You must configure a security policy on the SRX Series device to allow traffic to flow from the user devices to the MAG Series device.
• B、No security policy is necessary on the SRX Series device to allow traffic to flow from the user devices to the MAG Series device.
• C、You must configure host-inbound traffic on the SRX Series device to allow SSL traffic between the MAG Series device and the user devices.
• D、You must configure host-inbound traffic on the SRX Series device to allow EAP traffic between the MAG Series device and the user devices.

第8题：

第9题：

You have a MAG Series device with IP address 10.0.1.5 and hostname ad .pulse.local acting as an IF-MAP Federation server. The subject name of the device certificate on this server is ad .pulse.local.Which server URL must you configure on the IF-MAP clients communicating with this IF-MAP Federation server?（）

• A、https://acl.pulse.local/dana-ws/soap/dsifmap
• B、http://acl.pulse.local/dana-ws/soap/dsifmap
• C、https://acl/dana-ws/soap/dsifmap
• D、http://10.0.1.5/dana-ws/soap/dsifmap

第10题：

You have a VPN server that runs Windows Server 2003 Service Pack 2 (SP2). The VPN server is configured to have a static IP address pool. The IP address range is 10.10.10.1 to 10.10.10.200.All clients connect to the server by using PPTP. You discover that the VPN server supports only five concurrent VPN connections. You need to ensure that the VPN server supports 100 concurrent VPN connections. What should you do?（） 

• A、From Network Interfaces, create a new demand-dial interface. 
• B、From the properties of the server, disable multilink connections. 
• C、From the port properties, configure the WAN Miniport (PPTP) device. 
• D、From the properties of the server, configure the IP address assignment settings.