JN0-314 試験問題を無料オンラインアクセス

You notice that during peak hours, some firewall enforcers contain a high number of auth table entries. As you investigate the issue, you discover that all users are getting auth table mappings to all firewalls, which is not acceptable.
What should you do on the Junos Pulse Access Control Service to resolve this problem?

• A.Create auth table mapping policies that route users to specific resources
• B.Create Source Interface policies that route users to specific resources
• C.Create Resource Access policies that permit access to specific resources
• D.Delete the default auth table mapping policy

Which statement is true about a VIP address in a Junos Pulse Access Control Service cluster?

• A.A VIP is required when connecting a firewall enforcer to the cluster.
• B.A VIP is required when all endpoints connected to the cluster use the Junos Pulse client.
• C.A VIP is required when all endpoints connected to the cluster use agentless access.
• D.A VIP is required when all endpoints connected to the cluster use the Odyssey Access Client.

Which two statements are true about IP address pools when using IPsec tunnels through NAT devices? (Choose two.)

• A.A single IP address pool can be associated with multiple enforcers.
• B.IP address pools must consist of a contiguous block of addresses.
• C.Each enforcer requires a separate IP address pool.
• D.IP address pools can consist of a list of noncontiguous IP addresses.

You are troubleshooting communication issues between the Junos Pulse Access Control Service and an LDAP server. You are able to ping the LDAP server but would like to know more details about the communication between the devices.
Which built-in tool would you use to obtain packet details?

• A.TCP Dump
• B.Traceroute
• C.PCAP
• D.Wireshark

To allow host checking at Layer 2, which criteria must be satisfied?

• A.The sign-in page must have EAP-JUAC as an inner authentication protocol.
• B.The sign-in page must have EAP-JUAC as an outer authentication protocol.
• C.The sign-in page must have MSCHAPv2 as an outer authentication protocol.
• D.The sign-in page must have MSCHAPv2 as an inner authentication protocol.