多选题You are performing the initial setup of a new MAG Series device and have installed a valid CA- signed certificate on the MAG Series device. Connectivity to an existing SRX Series firewall enforcer cannot be obtained.What are two explanations for this b

题目
多选题
You are performing the initial setup of a new MAG Series device and have installed a valid CA- signed certificate on the MAG Series device. Connectivity to an existing SRX Series firewall enforcer cannot be obtained.What are two explanations for this behavior?()
A

The MAG Series device has multiple ports associated with the certificate.

B

The MAG Series device's serial number needs to be configured on the SRX Series device.

C

The SRX Series device must have a certificate signed by the same authority as the MAG Series device.

D

The MAG Series device and SRX Series device are not synchronized to an NTP server.

如果没有搜索结果或未解决您的问题,请直接 联系老师 获取答案。
相似问题和答案

第1题:

Without calling JTAC, which two troubleshooting tools on a MAG Series device would you use to identify the cause of an authentication failure?()

A. Remote Debugging

B. System Snapshot

C. User Access logs

D. Policy Tracing


参考答案:C, D

第2题:

You have a firewall enforcer protecting resources in a data center. A user is experiencing difficulty connecting to a protected resource.Which two elements must exist so the user can access the resource?()

A. Resource access policy on the MAG Series device

B. IPsec routing policy on the MAG Series device

C. General traffic policy blocking access through the firewall enforcer

D. Auth table entry on the firewall enforcer


参考答案:A, D

第3题:

You are validating the configuration of your SRX Series device and see the output shown below.What does this indicate?()

A.The SRX Series device has been configured correctly, the Junos Pulse Access Control Service is reachable on the network, and the SRX Series device is waiting to receive the initial connection from the Junos Pulse Access Control Service.

B.The SRX Series device has confirmed that the Junos Pulse Access Control Service is configured and is reachable on the network, the SRX Series device is waiting to receive the connection from the Junos Pulse Access Control Service, and all that remains to be accomplished is to configure the SRX Series device.

C.The SRX Series device is configured correctly and connected to the Junos Pulse Access Control Service. All that remains to be done to complete the configuration is to configure the SRX Series device on the Junos Pulse Access Control Service.

D.Both the Junos Pulse Access Control Service and the SRX Series device are configured correctly and communicating with each other.


参考答案:D

第4题:

What is a type of firewall enforcer supported by the Junos Pulse Access Control Service?()

  • A、Checkpoint firewall
  • B、SRX Series device
  • C、DP sensor
  • D、MX Series device

正确答案:A

第5题:

What is a type of firewall enforcer supported by the Junos Pulse Access Control Service?()

A. Checkpoint firewall

B. SRX Series device

C. DP sensor

D. MX Series device


参考答案:A

第6题:

You have configured the Odyssey Access Client with a profile which has the "Disable Server Verification" setting cleared.What will be the result if the device certificate on the MAG Series device has expired and the user attempts to authenticate?()

A. The user will be instructed to call the network administrator.

B. The user will fail authentication.

C. The user will be prompted to install a new device certificate on the MAG Series device.

D. The user will successfully authenticate and have full network access.


参考答案:B

第7题:

You are configuring an active/passive cluster of SRX Series devices as the firewall enforcer on a MAG Series device.Which statement is true?()

A. Multiple Infranet Enforcer instances are created with a single serial number of an SRX Series device defined in each configuration.

B. A single Infranet Enforcer instance is created with both serial numbers of the clustered SRX Series devices defined in the configuration.

C. Multiple Infranet Enforcer instances are created with a single IP address of an SRX Series device defined in each configuration.

D. A single Infranet enforcer instance is created with the VIP of the clustered SRX Series device defined in the configuration.


参考答案:B

第8题:

Which service is provided by a MAG Series device?()

A. Routing

B. MPLS VPNs

C. Access control

D. Intrusion detection


参考答案:B

第9题:

Which two Junos platforms provide stateful firewall functionality?()

  • A、MX Series
  • B、EX Series
  • C、SRX Series
  • D、QFX Series

正确答案:A,C

第10题:

Without calling JTAC, which two troubleshooting tools on a MAG Series device would you use to identify the cause of an authentication failure?()

  • A、Remote Debugging
  • B、System Snapshot
  • C、User Access logs
  • D、Policy Tracing

正确答案:C,D

更多相关问题