JN0-331章节练习(2018.08.09)

A.Firewall user authentication provides another layer of security in a network.
B.Firewall user authentication provides a means for accessing a JUNOS Software-based security device.
C.Firewall user authentication enables session-based forwarding.
D.Firewall user authentication is used as a last resort security method in a network.

A.New sessions will be evaluated. In-progress sessions will be re-evaluated.
B.New sessions will be evaluated. All in-progress sessions will continue.
C.New sessions will be evaluated. All in-progress sessions will be dropped.
D.New sessions will halt until all in-progress sessions are re-evaluated. In-progress sessions will be re-evaluated and possibly dropped.

A.ftp-group
B.ftp-users
C.firewall-user
D.nancy and walter

A.Mark permitted traffic for firewall user authentication.
B.Mark permitted traffic for SCREEN options.
C.Associate permitted traffic with an IPsec tunnel.
D.Associate permitted traffic with a NAT rule.
E.Mark permitted traffic for IDP processing.

A.Up to three external authentication server types can be used simultaneously.
B.Only one external authentication server type can be used simultaneously.
C.If the local password database is not configured in the authentication order， and the configured authentication server is unreachable， authentication is not performed.
D.If the local password database is not configured in the authentication order， and the configured authentication server rejects the authentication request， authentication is not performed

A.This section is where you define all chassis clustering configuration.
B.This configuration is required for members of a chassis cluster to talk to each other.
C.You can apply this configuration in the chassis cluster to make configuration easier.
D.This section is where unique node configuration is applied.

A.IKE SA is bidirectional.
B.IPsec SA is bidirectional.
C.IKE SA is established during phase 2 negotiations.
D.IPsec SA is established during phase 2 negotiations.

A.deny
B.discard
C.reject
D.close

A.when the remote VPN peer is behind a NAT device
B.when multiple networks need to be reached across the tunnel and GRE cannot be used
C.when the remote VPN peer is a dialup or remote access client
D.when a dynamic routing protocol is required across the VPN and GRE cannot be used

A.When priority settings are equal and the members participating in a cluster are initialized at the same time， the primary role for redundancy group 0 is assigned to node 0.
B.The preempt option determines the primary and secondary roles for redundancy group 0 during a failure and recovery scenario.
C.Redundancy group 0 manages the control plane failover between the nodes of a cluster.
D.The primary role can be shared for redundancy group 0 when the active-active option is enabled