JN0-331 試験問題を無料オンラインアクセス

Using a policy with the policy-rematch flag enabled, what happens to the existing and new sessions when you change the policy action from permit to deny?

• A.The new sessions matching the policy are denied. The existing sessions continue until they are completed or their timeout is reached.
• B.The new sessions matching the policy are denied. The existing sessions are dropped.
• C.The new sessions matching the policy might be allowed through if they match another policy. The existing sessions are dropped.
• D.The new sessions matching the policy are denied. The existing sessions, not being allowed to carry any traffic, simply timeout.

Regarding secure tunnel (st) interfaces, which statement is true?

• A.st interfaces are optional when configuring a route-based VPN.
• B.A static route can reference the st interface logical unit as the next-hop.
• C.You cannot apply static NAT on an st interface logical unit.
• D.You cannot assign st interfaces to a security zone.

Click the Exhibit button.
profile ftp-users {
client nancy {
firewall-user {
password "$9$lJ8vLNdVYZUHKMi.PfzFcyrvX7"; ## SECRET-DATA
}}
client walter {
firewall-user {
password "$9$a1UqfTQnApB36pBREKv4aJUk.5QF"; ## SECRET-DATA
}}
session-options {
client-group ftp-group;
}}
firewall-authentication {
pass-through {
default-profile ftp-users;
ftp {
banner {
login "JUNOS Rocks!";
}}}}
Given the configuration shown in the exhibit, which configuration object would be used to
associate both Nancy and Walter with firewall user authentication within a security policy?

• A.ftp-group
• B.nancy and walter
• C.firewall-user
• D.ftp-users

Which two security policy actions are valid? (Choose two.)

• A.close
• B.discard
• C.deny
• D.reject

Which three parameters are configured in the IKE policy? (Choose three.)

• A.security proposals
• B.dead peer detection settings
• C.mode
• D.external interface
• E.preshared key