最新的Juniper JN0-314免費考試真題

問題1

In a Junos Pulse Access Control Service active/active clustered environment, which statement is true about VIPs?

A. VIP is not required when using Odyssey Access Client and agentless access for all endpoint platforms.

B. VIP is not required when using Junos Pulse or Odyssey Access Client for all endpoint platforms.

C. VIP is not required when using only agentless access for all endpoint platforms.

D. VIP is not required when using Junos Pulse and agentless access for all endpoint platforms.

正確答案: B

問題2

When performing an initial configuration of the Junos Pulse Access Control Service, which method must you use to connect to the device?

A. console

B. Telnet

C. Wi-Fi

D. SSH

正確答案: C

問題3

To allow host checking at Layer 2, which criteria must be satisfied?

A. The sign-in page must have MSCHAPv2 as an outer authentication protocol.

B. The sign-in page must have EAP-JUAC as an inner authentication protocol.

C. The sign-in page must have MSCHAPv2 as an inner authentication protocol.

D. The sign-in page must have EAP-JUAC as an outer authentication protocol.

正確答案: B

問題4

The user-role-based policies of your SRX Series device are integrated with the Junos Pulse Access Control Service.
What are two user attributes that would be used to assign a firewall policy? (Choose two.)

A. user certificate subject alternative name

B. user realm assignment

C. user session duration

D. user LDAP group

正確答案: A,D

問題5

Using an LDAP authentication server, what do you configure to validate certificate attributes?

A. Create a user filter matching the DN of the certificate.

B. Match the certificate type and value with an attribute from the LDAP server.

C. Use the "is exactly" or "contains" operators.

D. Verify that the certificate is issued by a publicly trusted CA.

正確答案: B

問題6

Which protocol is used for communication between the Junos Pulse client and 802.1X-compliant switches when performing Layer 2 enforcement?

A. SSL

B. EAP

C. EAP-o-HTTP

D. RADIUS

正確答案: B

問題7

Which two statements are true about the integration of the Junos Pulse Access Control Service with Security Threat Response Manager (STRM)? (Choose two.)

A. The benefit of integrating the Junos Pulse Access Control Service with STRM is to reduce the load of logging in clustered environments.

B. The benefit of integrating the Junos Pulse Access Control Service with STRM is the ability to associate specific users to security breaches.

C. To integrate with STRM, preshared keys must be used between the Junos Pulse Gateway and STRM.

D. To integrate with STRM, you should configure the STRM IP address as a syslog server in the Junos Pulse Gateway.

正確答案: B,D

問題8

You navigate to "UAC" > "Infranet Enforcer" > "Auth Table Mapping" in the admin GUI. You see one policy, which is the unmodified, original default policy.
Which statement is true?

A. A successful authentication attempt will result in a new authentication table entry, which will be delivered only to the Junos enforcer protecting the network from which the user has authenticated.

B. To create a static auth table mapping, you must delete the default policy.

C. The default policy applies only to the factory-default role User.

D. Dynamic auth table mapping is not enabled.

正確答案: D

問題9

Which two actions are available in the GUI for creating location awareness rules? (Choose two.)

A. Resolve address

B. IP reachability

C. DNS server

D. WINS server

正確答案: A,C

問題10

An outside vendor is eligible for the guest role and the contractor role when accessing your network, that is secured with the Junos Pulse Access Control Service.
What is the default role-mapping behavior?

A. The vendor is automatically mapped to the first configured role

B. The vendor must select a rule from a list of eligible rules.

C. The vendor must select a role from a list of eligible roles.

D. The vendor is automatically granted a merged role.

正確答案: D

問題11

You are configuring captive portal on your SRX Series device for guest user access.
When would you use the redirect-traffic all command?

A. When you want all unauthenticated traffic to be redirected

B. When you want all authenticated traffic to be redirected.

C. When you want all clear text traffic to be redirected.

D. When you want all encrypted traffic to be redirected.

正確答案: C

最新的Juniper Junos Pulse Access Control, Specialist (JNCIS-AC) - JN0-314免費考試真題

聯系我們

站內鏈接

最新更新