최신Juniper Security, Specialist (JNCIS-SEC) - JN0-336무료샘플문제

A. Configure the IPsec VPN to use IKEv1 aggressive mode.

B. Configure the IPsec VPN to use DPD.

C. Configure the IPsec VPN to use NAT-T.

D. Configure the IPsec VPN to use IKEv2 aggressive mode.

A. It offers real-time threat analysis and mitigation.

B. It tracks and logs malicious traffic.

C. It increases performance speeds.

D. It simulates real user environments to trigger malicious code execution.

A. You must have multiple Layer 2 domains if you require more than 255 node IDs.

B. You must reboot the device anytime you change the node ID configuration.

C. If the cluster ID is set to 0, the HA configuration is ignored.

D. If the node ID is set to 0, the HA configuration is ignored.

A. You have too many Active Directory users.

B. JIMS is the only way to get data from Active Directory.

C. You have too many domain controllers.

D. The version of Windows OS is too old.

A. Juniper Secure Connect uses a route-based VPN.

B. Juniper Secure Connect cannot use a self-signed certificate.

C. Juniper Secure Connect uses a policy-based VPN.

D. Juniper Secure Connect can use a self-signed certificate.

A. when any rule is matched in the exempt rule base

B. when a rule is matched in the rule base with an action of ignore

C. when a rule is matched in the rule base with an action of close

D. when a terminal rule is matched in the rule base

A. Proxy IDs must match on both peers for a Phase 2 tunnel to establish.

B. Proxy IDs cannot override default Junos behavior.

C. Proxy IDs are created during IKE Phase 1.

D. By default, for a route-based IPsec VPN, a Junos security device sets the proxy ID to 0.0.0.0/0.